CVE-2022-40427

CVE-2022-40427 concerns the Python package d8s-domains distributed on PyPI. The vulnerability arises from a backdoor (the package democritus-networking ) inserted by a third party in version 0.1.0 , enabling potential remote code execution. Reported in multiple feeds (NVD, Red Hat, OSV, Veracode,...

CVE-2022-40427

The d8s-domains for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

CVE-2022-40806

The d8s-uuids for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0...

CVE-2022-40806

CVE-2022-40806 affects the Python package d8s-uuids from PyPI (version 0.1.0). The root cause is a backdoor inserted by a third party in the package, tracked across multiple feeds (e.g., Red Hat, NVD, OSV, Veracode). The vulnerability enables remote code execution with a high impact : attacker-co...

CVE-2022-40806

The d8s-uuids for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0...

CVE-2022-40811

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0...

CVE-2022-40811

CVE-2022-40811 affects the Python package d8s-urls distributed on PyPI, specifically version 0.1.0. Multiple connected sources confirm a backdoor named democritus-file-system was inserted by a third party, enabling potential remote code execution. NVD and Red Hat entries describe a critical risk ...

CVE-2022-40805

CVE-2022-40805 concerns the d8s-urls Python package (version 0.1.0 on PyPI). The vulnerability arises from a backdoor inserted by a third party (democritus-hypothesis package), enabling potential remote code execution. Multiple sources describe the issue as a backdoor in the PyPI distribution, wi...

CVE-2022-40805

The d8s-urls for python 0.1.0, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-hypothesis package...

CVE-2022-40424

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-networking package. The affected version of d8s-urls is 0.1.0...

CVE-2022-40424

CVE-2022-40424 affects d8s-urls 0.1.0 (Python, PyPI). A third-party backdoor in the democritus-networking package is implicated in potential arbitrary code execution. Connected sources confirm the vulnerability context and indicate a remediation path: avoid/use of this democritus-networking packa...

CVE-2022-40424

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-networking package. The affected version of d8s-urls is 0.1.0...

CVE-2022-38880

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The affected version is 0.1.0...

CVE-2022-38880

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The affected version is 0.1.0...

PYSEC-2022-43118

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The affected version is 0.1.0...

PYSEC-2022-43118

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The affected version is 0.1.0...

CVE-2022-38880

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The affected version is 0.1.0...

CVE-2022-38880

CVE-2022-38880 concerns the d8s-urls Python package (version 0.1.0) distributed via PyPI, where a third-party-inserted backdoor enables potential remote code execution. Multiple sources (NVD/Red Hat/Veracode/OSV/Politically diverse advisories) describe a backdoor and RCE risk tied to this version...

CVE-2022-38880

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The affected version is 0.1.0...

SparklingGoblin Revamps SideWalk Backdoor for Linux Variant

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary SparklingGoblin aka Earth Baku State-backed Chinese hackers has integrated a Linux variant of the SideWalk backdoor. SparklingGoblin Threat actors typically target East and Southeast Asian countries, wit...