VDB
Sign up
HIGH

GHSA-x6xg-3fj2-4pq3

`exotel` project on PyPI compromised, malicious release made

Details

The exotel project on PyPI was taken over via user account compromise via a phishing attack and a new malicious release made which contained code which some environment variables and downloaded and ran malware at install time

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/exotel

No fixed version published yet for exotel (pip). Pin to a known-safe version or switch to an alternative.

References