GHSA-g86j-hwg9-77q5
Suggest an improvement- Source
- https://github.com/advisories/GHSA-g86j-hwg9-77q5
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/12/GHSA-g86j-hwg9-77q5/GHSA-g86j-hwg9-77q5.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-g86j-hwg9-77q5
- Published
- 2022-12-27T15:25:51Z
- Modified
- 2022-12-27T15:25:51Z
- Summary
- SentinelOne impersonated via PyPI packages
- Details
-
In December 2022, threat actors impersonated SentinelOne by uploading fake software development kits (SDKs) onto PyPI. The SDKs contain fully functional SentinelOne clients, but the packages also contained malicious backdoors that are only executed when called on programmatically, as opposed to during installation. The packages have since been taken down from PyPI.
- Database specific
{ "cwe_ids": [], "github_reviewed": true, "github_reviewed_at": "2022-12-27T15:25:51Z", "nvd_published_at": null, "severity": "HIGH" }- References
Affected packages
PyPI / sentinelone
Package
- Name
- sentinelone
- View open source insights on deps.dev
- Purl
- pkg:pypi/sentinelone
PyPI / sentinelone-sdk
Package
- Name
- sentinelone-sdk
- View open source insights on deps.dev
- Purl
- pkg:pypi/sentinelone-sdk
PyPI / sentinelonesdk
Package
- Name
- sentinelonesdk
- View open source insights on deps.dev
- Purl
- pkg:pypi/sentinelonesdk
PyPI / sentinelone
Package
- Name
- sentinelone
- View open source insights on deps.dev
- Purl
- pkg:pypi/sentinelone
PyPI / sentinelonesdk
Package
- Name
- sentinelonesdk
- View open source insights on deps.dev
- Purl
- pkg:pypi/sentinelonesdk