Use of Invariant Value in Dynamically Changing Context

Overview Affected versions of this package are vulnerable to Use of Invariant Value in Dynamically Changing Context via cached entropy in the internal crypto random implementation. When an application uses a startup snapshot or SEA, cached entropy is retained across serialization and...

Malicious code in security-research-startup-snapshot-810764b303 (PyPI)

Source: kam193 c7f807a5943ac03cda3bdddc675ad3192d210e1f0ba1300959feff5d1d29c915 The package is most likely a reconnaissance of a shared infrastructure, collecting potentially sensitive data from cloud endpoints, activated via a PTH file on every Python loading. Collected data are stored in a loca...