Hey, may I ask you to say what have you found in the Python quicly package? I looked at it a few times in the last week, but I haven't found anything suspicious besides functions to work with pickles and marshalled objects. What have I missed? Or maybe it is just a part of something bigger?

Hi @kam193, thank you for your interest in the dataset.

The affected versions of quicly overwrite the install command in the setup.py file to silently collect information about the installing system and send it to a remote server. This is a common tactic of threat actors to obtain code execution on victim systems.

@ikretz Right, thanks for the answer! I see it, I have mistakenly looked at the newest version instead of analyse my findings in the mentioned versions. Thanks!