Skip to content

Supply-chain attacksBriefConfirmed by two or more outlets

elementary-data PyPI and GHCR backdoor

A script-injection flaw in GitHub Actions plus a forged signed tag led to a malicious 0.23.3.

Disclosed: April 2026

What happened

A script-injection flaw in GitHub Actions plus a forged signed tag led to a malicious 0.23.3. Clean: 0.23.4.

Sources

https://www.cloaked.com/post/could-your-builds-be-exposing-you-to-a-pypi-supply-chain-attack-via-elementary-data

This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.