elementData

Open-source ML tool elementData compromised, stole user credentials

An open-source package named elementData, which has one million monthly downloads, was compromised. Threat actors exploited a vulnerability in the developer's account workflow to gain access to signing keys and sensitiv…