Fallout in pypi, Aug 24 – Aug 30

What we caught this week while monitoring over 163,363,865 artifacts across 47 ecosystems. Campaigns that impact multiple packages are collapsed into a single entry with their siblings.

TUESDAY

Tue Aug 25 · 1 catch · 0 waves · 1 single

30d

readabilipy 0.2.0 pypi 30 days ago

XSS injection in htmlescape dependency

depends on hostile npm: htmlescape v1.1.1

O objectives H behaviours Md metadata · a group subscript counts categories, an atom subscript subcategories