PYSEC-2022-251
No score
The spam project on PyPI was taken over via user account compromise via a phishing attack and a new malicious release made which contained code which some environment variables and downloaded and ran malware at install time
What each source reports
OSV No score
The spam project on PyPI was taken over via user account compromise via a phishing attack and a new malicious release made which contained code which some environment variables and downloaded and ran malware at install time
- Record
PYSEC-2022-251- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
spamPyPI |
2.0.2 and later, plus listed versions 4.0.2 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
PYSEC-2022-251 is a vulnerability with no CVSS score yet in spam, published August 26, 2022. No source lists public exploit code. No source names a fixed version.