Malicious code in elementary-data (PyPI)

Source: kam193 96dc65f67f54411d3de6b23a33a8f73665e2703d7261b7f1720cdc089c528eea Versions 0.23.3 were compromised. A threat actor exploited a vulnerability in the CI workflows to inject code and establish, likely, a reverse shell in the CI environment...

MSC-2026-4415

Malicious code was introduced in elementary-data version 0.23.3 through a compromised GitHub Actions release workflow. The package included a malicious .pth file that automatically executed on Python startup, collected sensitive credentials and system data such as SSH keys, cloud tokens, .env...

MSC-2026-4416

Malicious code was introduced in elementary-data version 0.23.3 through a compromised GitHub Actions release workflow. The package included a malicious .pth file that automatically executed on Python startup, collected sensitive credentials and system data such as SSH keys, cloud tokens, .env...

Analyzing TeamPCP’s Supply Chain Attacks: Checkmarx KICS and elementary-data in CI/CD Credential Theft

Summary Our research analyzed the April 22 Checkmarx Keeping Infrastructure as Code Secure KICS and April 24 elementary-data incidents as two case studies within a broader TeamPCP supply chain campaign spanning at least seven confirmed waves. KICS showed multichannel poisoning across Docker Hub, ...

MAL-2026-3083 Malicious code in elementary-data (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 96dc65f67f54411d3de6b23a33a8f73665e2703d7261b7f1720cdc089c528eea Versions 0.23.3 were compromised. A threat actor exploited a vulnerability in the CI workflows to inject code and establish, likely, a reverse shell in the CI...

Malicious code in elementary-data (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 96dc65f67f54411d3de6b23a33a8f73665e2703d7261b7f1720cdc089c528eea Versions 0.23.3 were compromised. A threat actor exploited a vulnerability in the CI workflows to inject code and establish, likely, a reverse shell in the CI...