Affecting pkgutil package, versions [0,]
12 Python libraries were identified as malicious packages.
mybiubiubiu packages were vulnerable to typo-squatting attacks. These packages performed a ping back to a server indicating the package were installed.
On October 13th, 2018 all of these packages have been removed from Pypi.
Avoid usage of this package altogether.
Do your applications use this vulnerable package?
- Snyk ID
- 13 Oct, 2018
- 28 Oct, 2018