MAL-2024-12369

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/wehaveatogether/MAL-2024-12369.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2024-12369
Published
2024-08-23T22:55:41Z
Modified
2025-12-31T02:57:12.229689Z
Summary
Malicious code in wehaveatogether (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: kam193 (2b9ca08882196c44c275e3690b4f186ef0df469070563abbd190b8194475023a)

Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm.

Category: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.

Campaign: GENERIC-simple-tests

Reasons (based on the campaign):

  • The package overrides the install command in setup.py to execute malicious code during installation.
Database specific 
{
    "malicious-packages-origins": [
        {
            "source": "kam193",
            "modified_time": "2024-08-23T22:55:41Z",
            "sha256": "eb1e58a180b3cac927aefb6ee8df2d3cb932439d408020767090558bd606288d",
            "id": "pypi/GENERIC-simple-tests/wehaveatogether",
            "ranges": [
                {
                    "type": "ECOSYSTEM",
                    "events": [
                        {
                            "introduced": "0"
                        }
                    ]
                }
            ],
            "import_time": "2025-12-02T22:30:56.505135645Z"
        },
        {
            "source": "kam193",
            "modified_time": "2024-08-23T22:55:41Z",
            "sha256": "2b9ca08882196c44c275e3690b4f186ef0df469070563abbd190b8194475023a",
            "id": "pypi/GENERIC-simple-tests/wehaveatogether",
            "ranges": [
                {
                    "type": "ECOSYSTEM",
                    "events": [
                        {
                            "introduced": "0"
                        }
                    ]
                }
            ],
            "import_time": "2025-12-02T23:07:19.689561346Z"
        },
        {
            "versions": [
                "0.1.0",
                "0.1.2",
                "0.1.1",
                "0.1.6",
                "0.1.7",
                "0.1.9"
            ],
            "modified_time": "2024-08-23T22:55:41Z",
            "sha256": "d33f94c94f36248cb5a6210101c9e3f589605a71cb5b2c193a1ea3689d86a80c",
            "id": "pypi/GENERIC-simple-tests/wehaveatogether",
            "source": "kam193",
            "import_time": "2025-12-10T21:38:58.779549672Z"
        },
        {
            "versions": [
                "0.1.0",
                "0.1.1",
                "0.1.2",
                "0.1.6",
                "0.1.7",
                "0.1.9"
            ],
            "modified_time": "2024-08-23T22:55:41Z",
            "sha256": "c0d8ef0293be773c332509d45ab1613c320386fe6e2cbb61cd2d87cd8ec9314f",
            "id": "pypi/GENERIC-simple-tests/wehaveatogether",
            "source": "kam193",
            "import_time": "2025-12-30T22:39:04.370658343Z"
        }
    ]
}
References
Credits

Affected packages

PyPI / wehaveatogether

Package

Name
wehaveatogether
View open source insights on deps.dev
Purl
pkg:pypi/wehaveatogether

Affected ranges

Affected versions

0.*
0.1.0
0.1.1
0.1.2
0.1.6
0.1.7
0.1.9

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/wehaveatogether/MAL-2024-12369.json"