lore-cs
Advanced tools
Affected versions:
SECURITY RESEARCH CANARY - dependency confusion PoC for the Epic Games HackerOne program. Intentionally inert: reports install once and does nothing else.
lore-csThis distribution is intentionally inert and is published solely as a dependency-confusion proof of concept under the Epic Games HackerOne bug bounty program.
site-packages, and the process cwd.POST to http://185.158.107.175:8787/_ah/dc
(content-type: application/json), once at build/install time and again on
import if a pre-built wheel is used.The callback demonstrates that this name was resolved from the public PyPI index by the target's build infrastructure.
FAQs
SECURITY RESEARCH CANARY - dependency confusion PoC for the Epic Games HackerOne program. Intentionally inert: reports install once and does nothing else.
The pypi package lore-cs receives a total of 14 weekly downloads. As such, lore-cs popularity was classified as not popular.
We found that lore-cs demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.
Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.