MAL-2023-2001
See a problem?- Import Source
- https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/prompt-toolki/MAL-2023-2001.json
- JSON Data
- https://api.osv.dev/v1/vulns/MAL-2023-2001
- Published
- 2023-02-11T12:27:03Z
- Modified
- 2023-08-21T20:12:58Z
- Summary
- Malicious code in prompt-toolki (PyPI)
- Details
-
-= Per source details. Do not edit below this line.=-
Source: checkmarx (acef1e4de1031517c9ec95e1bd0a0fcbdc570dc0bd4598502414eb642ef81936)
Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet addresses
- References
- Credits
-
-
- Checkmarx - FINDER
-
Affected packages
PyPI / prompt-toolki
Package
- Name
- prompt-toolki
- View open source insights on deps.dev
- Purl
- pkg:pypi/prompt-toolki