MAL-2024-4609

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/nuget/pathoschild.stardew.modbuildconfig.net/MAL-2024-4609.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2024-4609

Published

2024-06-25T13:30:46Z

Modified

2024-10-24T01:01:57Z

Summary

Malicious code in Pathoschild.Stardew.ModBuildConfig.Net (NuGet)

Details

-= Per source details. Do not edit below this line.=-

Database specific

{
    "malicious-packages-origins": [
        {
            "sha256": "ad53e98344c4105a5dfcb9039f324ec6ba74a206170f92f441dbd14563eb5eac",
            "import_time": "2024-06-28T02:47:58.866847948Z",
            "versions": [
                "2.1.9",
                "5.1.3",
                "4.8.8",
                "6.4.8",
                "9.6.9",
                "4.4.8",
                "1.4.7",
                "1.5.6",
                "6.2.6",
                "9.2.9"
            ],
            "id": "RLMA-2024-03397",
            "source": "reversing-labs",
            "modified_time": "2024-06-25T13:30:46Z"
        },
        {
            "sha256": "810becaf633b0b2efd4d104f8872d107a8f11d3c24be7bbae78f11af9619cc74",
            "import_time": "2024-10-24T00:58:40.561017246Z",
            "id": "RLUA-2024-07712",
            "source": "reversing-labs",
            "modified_time": "2024-10-16T13:48:20Z"
        }
    ]
}

References

https://www.reversinglabs.com/blog/malicious-nuget-campaign-uses-homoglyphs-and-il-weaving-to-fool-devs

Credits

- ReversingLabs - FINDER
- - https://www.reversinglabs.com

Affected packages

NuGet / Pathoschild.Stardew.ModBuildConfig.Net

Package

Name: Pathoschild.Stardew.ModBuildConfig.Net; View open source insights on deps.dev
Purl: pkg:nuget/Pathoschild.Stardew.ModBuildConfig.Net

Affected ranges

Affected versions

1.*

1.4.7

1.5.6

2.*

2.1.9

4.*

4.4.8

4.8.8

5.*

5.1.3

6.*

6.2.6

6.4.8

9.*

9.2.9

9.6.9