Name of the Vulnerable Software and Affected Versions d8s-dates version 0.1.0 d8s-htm version 0.1.0

Description A potential code-execution backdoor was inserted by a third party into the d8s-dates package for python distributed on PyPI. Another affected package is democritus-timezones.

Recommendations For d8s-dates version 0.1.0, consider removing or avoiding the use of this version until a safe alternative is available. For d8s-htm version 0.1.0, avoid using this version due to the potential code-execution backdoor. As a temporary workaround, consider restricting access to the affected packages to minimize the risk of exploitation.