MAL-2023-1920
See a problem?- Import Source
- https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/opeenpyxl/MAL-2023-1920.json
- JSON Data
- https://api.osv.dev/v1/vulns/MAL-2023-1920
- Published
- 2023-02-11T11:33:08Z
- Modified
- 2023-08-21T20:12:58Z
- Summary
- Malicious code in opeenpyxl (PyPI)
- Details
-
-= Per source details. Do not edit below this line.=-
Source: checkmarx (4e15e27befa02a6dc0be29492a896ed03c2db9495451f85f713eebe7f93c2ed6)
Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet addresses
- References
- Credits
-
-
- Checkmarx - FINDER
-
Affected packages
PyPI / opeenpyxl
Package
- Name
- opeenpyxl
- View open source insights on deps.dev
- Purl
- pkg:pypi/opeenpyxl