MAL-2024-4472

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/nuget/dnlib.net/MAL-2024-4472.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2024-4472

Published

2024-06-25T13:31:58Z

Modified

2024-10-24T01:01:57Z

Summary

Malicious code in dnlib.net (NuGet)

Details

-= Per source details. Do not edit below this line.=-

Database specific

{
    "malicious-packages-origins": [
        {
            "sha256": "979c6cc47221ab483f409dc3258e0c0773adef11e8a6f5a5bebfd0e719bb278b",
            "import_time": "2024-06-28T02:48:10.039129839Z",
            "versions": [
                "4.4.1",
                "4.4.2",
                "4.2.8",
                "4.2.9",
                "4.3.7",
                "4.3.3",
                "4.3.2",
                "4.3.6",
                "4.3.0",
                "4.3.4",
                "4.3.5",
                "4.3.8",
                "4.3.1",
                "4.4.0"
            ],
            "id": "RLMA-2024-03495",
            "source": "reversing-labs",
            "modified_time": "2024-06-25T13:31:58Z"
        },
        {
            "sha256": "cb0d3632d653f5c6d038c54e479f4a2e4824b9e158ae619c072db70859bcac3d",
            "import_time": "2024-10-24T00:58:43.538217454Z",
            "id": "RLUA-2024-07758",
            "source": "reversing-labs",
            "modified_time": "2024-10-16T13:48:50Z"
        }
    ]
}

References

https://www.reversinglabs.com/blog/malicious-nuget-campaign-uses-homoglyphs-and-il-weaving-to-fool-devs

Credits

- ReversingLabs - FINDER
- - https://www.reversinglabs.com

Affected packages

NuGet / dnlib.net

Package

Name: dnlib.net; View open source insights on deps.dev
Purl: pkg:nuget/dnlib.net

Affected ranges

Affected versions

4.*

4.2.8

4.2.9

4.3.0

4.3.1

4.3.2

4.3.3

4.3.4

4.3.5

4.3.6

4.3.7

4.3.8

4.4.0

4.4.1

4.4.2