If this package is installed
Remove it, treat the machine (or CI runner) as compromised, and rotate every secret, token and key it could access — from a different, clean machine.
Malicious
MAL-2024-5181
glovo-data-platform-declarative
PyPI package · versions 999.9.19, 999.9.20, 999.9.18, 999.9.17, 999.9.13, 999.9.15
Reported Jun 25, 2024 · Updated Dec 9, 2024