Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the seed mechanism's console script launcher rewriting logic in pipinvoke.py on POSIX systems. When a virtual environment is created and pip installs packages with console scripts, the interpreter path embedded in...

EUVD-2023-46212

Malicious code in bioql PyPI...