1 threat
Most recently published first
The bundyfed package on PyPI versions 1.0.0 and 1.0.1 contains malicious code that downloads and executes an infostealer during installation. This is achieved by overriding the install command in setup.py to run the malicious payload.
Page 1 of 1