Oct. 11, 2022, 10:15 p.m. |

National Vulnerability Database web.nvd.nist.gov

The d8s-pdfs package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0.

cve pdfs

SITEC - Pen Tester

@ Peraton | MacDill AFB, FL, United States

Information Security Specialist (Sr. OT Security Engineer)

@ Vertiv | Philippines

Product Security Engineer

@ Anduril | Costa Mesa, California, United States

Cybersecurity Tools Engineer

@ Uni Systems | Mons, Wallonia, Belgium

Baseband Security Lead

@ Babcock | Corsham, GB, SN13 9NP

Cyber Network Defense Analyst III

@ KBR, Inc. | VA149: 1110 N Glebe Road Arlington 1110 North Glebe Road Suite 630, Arlington, VA, 22201 USA