Elementary Data release pipeline compromised to publish malicious PyPI and Docker artifacts

On 24 April 2026, an attacker exploited a script-injection vulnerability in an Elementary Data GitHub Actions workflow and used the compromised release process to publish malicious elementary-data version 0.23.3 to PyPI and a corresponding malicious Docker image. Elementary confirmed that the forged release contained malicious code and warned users who executed it to assume that credentials accessible from their environments may have been exposed. The company removed the affected artifacts, rotated credentials and released a clean replacement. The poisoning of official package and container distribution channels constitutes a direct software-supply-chain data-integrity impact.