CVE-2022-30885: 
Python vulnerability analysis and mitigation

The pyesasky library for Python versions 1.2.0 through 1.4.2 contained a malicious backdoor via the request package. This vulnerability was discovered in May 2022 (GitHub Issue).

The vulnerability was introduced through a malicious dependency called 'request' package that was included in pyesasky versions 1.2.0 through 1.4.2. While the malicious request package was removed from PyPI, it remained available on some mirror sites, allowing for potential exploitation through alternative package indexes (GitHub Issue).

The backdoor could allow attackers to execute arbitrary code, potentially leading to unauthorized access to sensitive user information and escalation of privileges (GitHub Issue).

The recommended mitigation is to avoid using pyesasky versions 1.2.0 through 1.4.2. Users should upgrade to version 1.4.3 or later, which does not contain the malicious package (PyPI).