Code execution via malicious request dependency

Code execution in Catly-Translate 0.0.3 through 0.0.5 allows attackers to steal sensitive data and cryptocurrency keys via a backdoor. The public report identifies the malicious request dependency as the backdoor but does not disclose the code path or operation that executes it. Installing an affected release from a package index is the gate; execution exposes local secrets and allows privilege escalation.