Skip to content
OpenAdvisories
Unscored PYSEC-2024-1

gratient 0.5 contains credential harvesting code

Published Jan 3, 2024 · Assigned by PYSEC

Description

gratient is a user-facing library for generating color gradients of text.
Version 0.5 contained obfuscated, malicious code targeting
Windows platforms, harvesting information and credentials from the
user's system and sending them to a remote server.
Services may include Mullvad VPN and Telegram.

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI gratient 0.5 — PYSEC-2024-1

References