{"action":"No fix published. Pin and monitor.","affected":[],"component":"spam","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-2r6g-7r83-jg72","id":"tcs_01M5KET6P92EH6VATSEGFKED9V","modified_at":"2024-08-30T23:37:36Z","published_at":"2024-08-30T23:37:36Z","references":["https://osv.dev/vulnerability/GHSA-2r6g-7r83-jg72","https://github.com/pypa/advisory-database/tree/main/vulns/spam/PYSEC-2022-251.yaml","https://twitter.com/pypi/status/1562442207079976966"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-2r6g-7r83-jg72","url":"https://osv.dev/vulnerability/GHSA-2r6g-7r83-jg72"}],"summary":"`spam` project on PyPI compromised, malicious releases made"}