Headline
GHSA-xm4r-5rj9-2pg3: gratient 0.5 contains credential harvesting code
gratient is a user-facing library for generating color gradients of text. Version 0.5 contained obfuscated, malicious code targeting Windows platforms, harvesting information and credentials from the user’s system and sending them to a remote server. Services may include Mullvad VPN and Telegram.
gratient 0.5 contains credential harvesting code
High severity GitHub Reviewed Published Aug 30, 2024 to the GitHub Advisory Database • Updated Aug 30, 2024