CVE-2022-38881

The d8s-archives for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0...

CVE-2022-38881

CVE-2022-38881 affects the Python package d8s-archives distributed on PyPI. The vulnerability is caused by a backdoor (the democritus-strings package) inserted by a third party, with the affected version reported as 0.1.0. Public documents describe potential code execution as the impact and note ...