CVE-2022-28470

marcador package in PyPI 0.1 through 0.13 included a code-execution backdoor.