CVE-2022-41381

The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0...

CVE-2022-41381

CVE-2022-41381 affects the PyPI package d8s-utility (version 0.1.0); a third-party‑inserted backdoor (democritus-file-system) enables potential remote code execution. Available connected releases identify the backdoor and the affected version, with high impact across confidentiality, integrity, a...