CVE-2022-40430

The d8s-utility for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

CVE-2022-40430

The CVE-2022-40430 issue affects the Python package d8s-utility (PyPI) where a backdoor component, democritus-networking, was inserted into version 0.1.0, enabling potential remote code execution. Connected sources consistently describe a third-party backdoor in the distribution that can lead to ...