The d8s-algorithms package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-dicts package. The affected version is 0.1.0.
CPE | Name | Operator | Version |
---|---|---|---|
d8s-algorithms | eq | 0.1.0 |