{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"cipherbcrypt","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":[],"id":"tcs_01M5KGNA96QRG5NGNANXTTVT7V","modified_at":"2026-06-09T16:05:00Z","published_at":"2024-07-09T09:56:00Z","references":["https://osv.dev/vulnerability/PYSEC-2024-55"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2024-55","url":"https://osv.dev/vulnerability/PYSEC-2024-55"}],"summary":"Malicious package. Exfiltrated secrets to a target server."}