Skip to content
OpenAdvisories
Unscored PYSEC-2025-3

When using the project to bypass Deezer API restrictions, project exfiltrates user data to a hardcoded server.

Published Feb 26, 2025 · Assigned by PYSEC

Description

Published in 2019, the autodzee package is a Python library
that bypasses Deezer API restrictions to download music.
The package was found to exfiltrate user data to a hardcoded server,
which could be used for malicious purposes.

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI autodzee all versions — PYSEC-2025-3

References