On 23/09/2026 02:53, Sam James wrote:
CPAN shows it doesn't have any reverse dependencies:
https://metacpan.org/dist/Crypt-SelfCertificate/requires
We are not aware of reverse dependencies.
The https://metacpan.org/dist/Crypt-SelfCertificate/changes page doesn't
work for me, presumably because it's all been yanked.
Yes, all versions have been removed, however they may exist on
independent mirrors.
Did this module have any legitimate releases? From a dropdown on
metacpan, it looks like it had 3 total releases (but I don't know if
some got yanked -> missing): 1.00, 1.01, and 1.05.
1.00 did not have the dropper, but does not appear to have worked
properly. It may have functioned as staging so that an upgrade would
have installed the dropper.
Is there any other background available? Has this author published any
other modules (looks like no)? Have they been banned now (I assume yes)?
CPANSec are still investigating.
