{"action":"No fix published. Pin and monitor.","affected":[],"component":"uniapi","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":[],"id":"tcs_01M5KGP4VM0CP6T2AB5CMH9Q1N","modified_at":"2025-01-24T19:56:53Z","published_at":"2025-01-24T19:56:53Z","references":["https://osv.dev/vulnerability/PYSEC-2025-2","https://inspector.pypi.io/project/uniapi/1.0.7/packages/0f/40/c6e06c22bbc22ef45f40bf5a7711763fa08fec4d16b4718d86fd60970131/uniapi-1.0.7.tar.gz/uniapi-1.0.7/uniapi/__init__.py#line.11","https://github.com/kam193/package-campaigns/blob/main/pypi/campaigns/highly_suspicious/2025-01-uniapi.json"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2025-2","url":"https://osv.dev/vulnerability/PYSEC-2025-2"}],"summary":"uniapi version 1.0.7 contained an information harvesting script."}