Description
marcador package in PyPI 0.1 through 0.13 included a code-execution backdoor.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | marcador | < 0.14 | 0.14 | GHSA-57qv-h9m7-jxfg |
| PyPI | marcador | >= 0.1, < 0.14 | 0.14 | PYSEC-2022-185 |
Critical · 9.8
CVE-2022-28470
EUVD-2022-0151GHSA-57qv-h9m7-jxfgPYSEC-2022-185
Code-execution backdoor in marcador
Published May 8, 2022 · Updated Aug 3, 2024 · Assigned by mitre