Junglewise Threat Intelligence

`exotel` project on PyPI compromised, malicious release made

Severity: info · Published 2024-08-30

Technologies: exotel (PyPI). Vendors: PyPI.

Executive brief

`exotel` project on PyPI compromised, malicious release made

Affected products

PyPI exotel

Related threats

PYSEC-2022-43134 - The exotel (aka exotel-py) package in PyPI as of 0.1.6 includes a code execution backdoor inserted by a third party.
PYSEC-2022-250 - The exotel project on PyPI was taken over via user account compromise via a phishing attack and a new malicious release made which contained