PYSEC-2025-4
When using the project to bypass Deezer API restrictions, project exfiltrates user data to a hardcoded server.
Published in 2019, the automslc package is a Python library that bypasses Deezer API restrictions to download music. The package was found to exfiltrate user data to a hardcoded server, which could be used for malicious purposes.
What each source reports
OSVNo score
When using the project to bypass Deezer API restrictions, project exfiltrates user data to a hardcoded server.
Published in 2019, the automslc package is a Python library that bypasses Deezer API restrictions to download music. The package was found to exfiltrate user data to a hardcoded server, which could be used for malicious purposes.
- Record
PYSEC-2025-4- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
automslcPyPI | All versions | None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
PYSEC-2025-4 is a vulnerability with no CVSS score yet in automslc, published February 26, 2025. No source lists public exploit code. No source names a fixed version.