Name of the Vulnerable Software and Affected Versions d8s-netstrings version 0.1.0

Description The d8s-netstrings package for Python, distributed on PyPI, contains a potential code-execution backdoor. This backdoor is attributed to the democritus-strings package, which was inserted by a third party.

Recommendations For version 0.1.0, avoid using the d8s-netstrings package until a safe version is available. As a temporary workaround, consider removing or restricting the use of the democritus-strings package to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.