GHSA-5grr-72f9-678v
Malware package cipherbcrypt
No score
Malicious package. Exfiltrated secrets to a target server.
What each source reports
GitHub AdvisoriesNo score
Malware package cipherbcrypt
Malicious package. Exfiltrated secrets to a target server.
- Record
GHSA-5grr-72f9-678v- Updated
- 2026-11-02
OSVNo score
Malware package cipherbcrypt
Malicious package. Exfiltrated secrets to a target server.
- Record
GHSA-5grr-72f9-678v- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cipherbcryptPyPI | All versions | None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-5grr-72f9-678v is a vulnerability with no CVSS score yet in cipherbcrypt, published July 12, 2024. No source lists public exploit code. No source names a fixed version.