WS-2022-0134

The "ctx" hosted project on "PyPI" https://pypi.org/project/ctx/ was taken over via user account compromise and replaced with a malicious project which contained runtime code that collected the content of "os.environ.items" when instantiating "Ctx" objects. The captured environment variables were...