If this package is installed
Remove it, treat the machine (or CI runner) as compromised, and rotate every secret, token and key it could access — from a different, clean machine.
Malicious
MAL-2024-5182
glovo-data-platform-declarative-airflow
PyPI package · versions 999.9.19, 999.9.20, 999.9.18, 999.9.17, 999.9.13, 999.9.14
Reported Jun 25, 2024 · Updated Oct 24, 2024