{
  "affected": [
    {
      "package": {
        "ecosystem": "PyPI",
        "name": "aiocpa",
        "purl": "pkg:pypi/aiocpa"
      },
      "versions": [
        "0.1.13",
        "0.1.14"
      ]
    }
  ],
  "credits": [
    {
      "name": "Karlo Zanki",
      "type": "REPORTER"
    },
    {
      "name": "Mike Fiedler",
      "type": "COORDINATOR"
    }
  ],
  "details": "aiocpa is a user-facing library for generating color gradients of text.\nVersion 0.1.13 introduced obfuscated, malicious code targeting\nCrypto Pay users, forwarding client credentials to a remote Telegram bot.\nAll versions have been removed from PyPI.\n",
  "id": "PYSEC-2024-152",
  "modified": "2024-11-25T19:30:00+00:00",
  "references": [
    {
      "type": "EVIDENCE",
      "url": "https://inspector.pypi.io/project/aiocpa/0.1.13/packages/ab/98/7343281068a2c39086d0b877219668a487508197f46e89b3f41046a4a8ba/aiocpa-0.1.13.tar.gz/aiocpa-0.1.13/cryptopay/utils/sync.py#line.44"
    },
    {
      "type": "WEB",
      "url": "https://blog.pypi.org/posts/2024-11-25-aiocpa-attack-analysis/"
    }
  ],
  "summary": "aiocpa 0.1.13 contains credential harvesting code"
}