MAL-2024-12261

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/easypydb/MAL-2024-12261.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2024-12261
Published
2024-09-21T20:17:50Z
Modified
2025-12-12T20:39:28.392278Z
Summary
Malicious code in easypydb (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: kam193 (6bba8fa7c973e17898962b7fa6aebecdd0d9149b9e3a1f078bbc57f5e4bf7f0a)

The package is a wrapper around "s1db" package, which offers some kind of easy online database. However, this package silently exfiltrates credentials given by people and sends them to a Discord webhook, effectively allowing stealing data.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2024-09-old-easypydb

Reasons (based on the campaign):

  • action-hidden-in-lib-usage

  • exfiltration-generic

    -

Database specific 
{
    "malicious-packages-origins": [
        {
            "sha256": "177812f959194ceaf89be68acd4ee0f73f9edf00cc7c24e7748a323780e85f96",
            "source": "kam193",
            "modified_time": "2024-09-21T20:17:50Z",
            "id": "pypi/2024-09-old-easypydb/easypydb",
            "ranges": [
                {
                    "type": "ECOSYSTEM",
                    "events": [
                        {
                            "introduced": "0"
                        }
                    ]
                }
            ],
            "import_time": "2025-12-02T22:30:55.118849876Z"
        },
        {
            "sha256": "6bba8fa7c973e17898962b7fa6aebecdd0d9149b9e3a1f078bbc57f5e4bf7f0a",
            "source": "kam193",
            "modified_time": "2024-09-21T20:17:50Z",
            "id": "pypi/2024-09-old-easypydb/easypydb",
            "ranges": [
                {
                    "type": "ECOSYSTEM",
                    "events": [
                        {
                            "introduced": "0"
                        }
                    ]
                }
            ],
            "import_time": "2025-12-02T23:07:18.130354997Z"
        },
        {
            "sha256": "96f0ae7f9e01323cf16230e24267394394984c5cf3e188ed5499c86637bd0766",
            "source": "kam193",
            "modified_time": "2024-09-21T20:17:50Z",
            "id": "pypi/2024-09-old-easypydb/easypydb",
            "versions": [
                "0.4.4"
            ],
            "import_time": "2025-12-10T21:38:57.415535502Z"
        }
    ],
    "iocs": {
        "urls": [
            "https://discord.com/api/webhooks/846019171992862750/t3AJQZ-fE-TrUlnE5tMm1FFw9KrAIJ6MkaokcCz4YP8sRDwy9g9z8VSMdCeXwUF4UwUv"
        ]
    }
}
References
Credits

Affected packages

PyPI / easypydb

Package

Name
easypydb
View open source insights on deps.dev
Purl
pkg:pypi/easypydb

Affected ranges

Affected versions

0.*
0.4.4

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/easypydb/MAL-2024-12261.json"