Advisories for Pypi/D8s-Dates package

2022

Unrestricted Upload of File with Dangerous Type

The d8s-dates for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-timezones package. The affected version of d8s-htm is 0.1.0.