Executive brief
The d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
Affected products
- PyPI d8s-xml
Junglewise Threat Intelligence
PYSEC-2022-43092 - The d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the
Severity: low · CVSS 3.1 · Published 2022-09-19
Technologies: d8s-xml (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2022-43093 - The d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code exe
- PYSEC-2022-43045 - The d8s-xml package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor