CVE-2022-28470

Published May 8th, 2022

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

7.5

HIGH

Affected

PROJECTS

Description

marcador package in PyPI 0.1 through 0.13 included a code-execution backdoor.

marcador

![](https://gitlab.com/joajfreitas/bookmarks/badges/master/pipeline.svg) # Marcador Minimal bookmark manager ## Install $ pip install marcador ## Usage CLI interface $ marcador --help Usage: marcador [OPTIONS] COMMAND [ARGS]... Options: --version --help Show this message and exit. Commands: add bookmarks delete rofi server ### Rofi interface $ marcador rofi ## Thanks This project is heavily inspired by [buku](https://github.com/jarun/Buku) ## Screenshots ![bookmarks screenshot](https://raw.githubusercontent.com/joajfreitas/marcador/master/showcase_pretty.png)

Python Package Index

joajfreitas/marcador

minimal bookmark manager with rofi front end.

GitHub