videochain added to PyPI

A new package named 'videochain' was added to the Python Package Index (PyPI), potentially exposing users to supply-chain attacks. The lightweight Video RAG framework for multimodal reasoning could be exploited to execute arbitrary code in affected environments. Users of the package are at risk of unauthorized remote code execution if the package is malicious or compromised.

A Lightweight Video RAG Framework for Multimodal Reasoning