If this package is installed
Remove it, treat the machine (or CI runner) as compromised, and rotate every secret, token and key it could access — from a different, clean machine.
Malicious
MAL-2024-9953
bughunter9
PyPI package · versions 9.5, 9.6, 9.7, 9.8, 9.9, 9.10, 9.11, 9.13, 9.14, 9.15, 9.16, 9.17, 9.18, 9.19, 9.21, 9.22, 9.23, 9.20, 9.24, 9.25
Reported Oct 16, 2024 · Updated Dec 9, 2024