Malicious Package Affecting hello-world-example package, versions [0,]
Threat Intelligence
Exploit Maturity
Mature
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PYTHON-HELLOWORLDEXAMPLE-3106946
- published 8 Nov 2022
- disclosed 7 Nov 2022
- credit Phylum Researchers
How to fix?
Avoid using all malicious instances of the hello-world-example package.
Overview
hello-world-example is a malicious package. This is a "dependency confusion" package, which means the package name is based on existing repositories, namespaces, or components. It aims to trick users into downloading the package which contains malicious code.
References
CVSS Scores
version 3.1