phenosign (>=0.1.1, <=0.1.4), ppkt2synergy (>=0.0.7, <=0.1.0) potentially affected by unknown CVE via gpsea (>=0.9.8, <=0.9.13)

gpsea PYPI version =0.9.8, =0.1.1, =0.0.7, =0.1.0 Source cves: unknown CVE Source advisory: SNYK:PYTHON-GPSEA-17230568...

gpsea (>=0.2.0, <=0.9.11), ppkt2synergy (>=0.0.7, <=0.1.0) potentially affected by unknown CVE via phenopacket-store-toolkit (0.1.6)

phenopacket-store-toolkit PYPI version 0.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on phenopacket-store-toolkit and may be impacted: - gpsea =0.2.0, =0.0.7, =0.1.0 Source cves: unknown CVE Source advisory:...

Embedded Malicious Code

Overview ppkt2synergy is a Python library for analyzing correlations and synergy in GA4GH Phenopacket cohorts. Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Shai-Hulud / Miasma software supply chain campaign, ...