CVE-2022-28470

marcador package in PyPI 0.1 through 0.13 included a code-execution backdoor...

CVE-2022-28470

CVE-2022-28470 is linked to the PyPI package marcador, where versions 0.1 through 0.13 are reported to contain a code-execution backdoor. The connected records corroborate this across multiple sources (NVD entry, Red Hat advisory, GitHub advisory, and OSV/CVE mirrors). The documents do not disclo...