MAL-2024-1334

Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/multiconnections/MAL-2024-1334.json
Published
2024-05-06T23:58:22Z
Modified
2024-05-08T11:05:18Z
Summary
Malicious code in multiconnections (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: ossf-package-analysis (d080fb698cec14d7c79b82bff9f6ca58764dbfcd5b487ea88e5822e59e1d74cb)

The OpenSSF Package Analysis project identified 'multiconnections' @ 2.34.23 (pypi) as malicious.

It is considered malicious because:

  • The package communicates with a domain associated with malicious activity.
References

Affected packages

PyPI / multiconnections

Package

Affected ranges

Affected versions

2.*

2.34.23
2.35.1
2.35.4
2.35.5
2.35.7