logo

Database

Use of software with malware In git-config-sync

Description

Malicious code in git-config-sync (PyPI)

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version

Aliases

1. OSV-MAL-2026-42732. GCVE-MAL-2026-4273

References

1. https://github.com/ddjidd5642. https://github.com/ddjidd564/defi-security-best-practices/tree/gh-pages3. https://ddjidd564.github.io/defi-security-best-practices/wallet-verify.py4. https://github.com/orgs/modelcontextprotocol/discussions/7615. https://bad-packages.kam193.eu/pypi/package/git-config-sync

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.