logo

Database

Use of software with malware In elementary-data

Description

Malicious code in elementary-data (PyPI)

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version

Aliases

1. OSV-MAL-2026-30832. GCVE-MAL-2026-3083

References

1. https://github.com/elementary-data/elementary/issues/22052. https://github.com/realtungtungtungsahur3. https://github.com/elementary-data/elementary/actions/runs/24914128534/job/729624120744. https://github.com/elementary-data/elementary/pull/2204/changes5. https://github.com/elementary-data/elementary/pull/2203/changes6. https://github.com/elementary-data/elementary/pull/22037. https://github.com/elementary-data/elementary/actions/runs/249144466308. https://bad-packages.kam193.eu/pypi/campaign/2026-04-compr-elementary-data9. https://www.stepsecurity.io/blog/elementary-data-compromised-on-pypi-and-ghcr-forged-release-pushed-via-github-actions-script-injection10. https://www.elementary-data.com/post/security-incident-report-malicious-release-of-elementary-oss-python-cli-v0-23-3

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.