PyPI: 11cent
SFTY-20220406-74565
Safety legacy ID: pyup.io-47995
11Cent is a malicious package. It exfiltrates data from the host where it is installed. https://bertusk.medium.com/malicious-pypi-packages-found-exfiltrating-data-and-opening-reverse-shells-87d4afb5d99e
Overview
11Cent is a malicious package. It exfiltrates data from the host where it is installed. https://bertusk.medium.com/malicious-pypi-packages-found-exfiltrating-data-and-opening-reverse-shells-87d4afb5d99e
Advisory
11Cent is a malicious package. It exfiltrates data from the host where it is installed. https://bertusk.medium.com/malicious-pypi-packages-found-exfiltrating-data-and-opening-reverse-shells-87d4afb5d99e
How to Fix
We recommend updating 11cent to the latest non-vulnerable version.
Mitigation and Workarounds
---
Vulnerable Functions
Functions linked to known vulnerabilities.
Verified by Safety
Our Cybersecurity Intelligence Team reviewed this vulnerability. We combine public data with our own research to find issues not yet reported to public sources.
Learn more