MAL-2024-4629

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/nuget/rimworld.reference.libary/MAL-2024-4629.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2024-4629

Published

2024-06-25T13:31:00Z

Modified

2024-10-24T01:01:57Z

Summary

Malicious code in Rimworld.Reference.Libary (NuGet)

Details

-= Per source details. Do not edit below this line.=-

Database specific

{
    "malicious-packages-origins": [
        {
            "versions": [
                "3.0.4",
                "4.4.7",
                "2.7.8",
                "5.3.0",
                "2.4.8",
                "8.6.8",
                "7.7.7",
                "8.4.0",
                "7.2.5"
            ],
            "sha256": "1a70266edca98bfb689c634cbb0163514282e07e51e8926d597b655c454f1000",
            "modified_time": "2024-06-25T13:31:00Z",
            "import_time": "2024-06-28T02:48:01.028112975Z",
            "id": "RLMA-2024-03416",
            "source": "reversing-labs"
        },
        {
            "sha256": "a6cb47e14f7b22d9eef167a284e5b266b659e3f3e43de8b675b5dff5968f8d47",
            "modified_time": "2024-10-16T13:48:26Z",
            "import_time": "2024-10-24T00:58:41.149850664Z",
            "id": "RLUA-2024-07720",
            "source": "reversing-labs"
        }
    ]
}

References

https://www.reversinglabs.com/blog/malicious-nuget-campaign-uses-homoglyphs-and-il-weaving-to-fool-devs

Credits

- ReversingLabs - FINDER
- - https://www.reversinglabs.com

Affected packages

NuGet / Rimworld.Reference.Libary

Package

Name: Rimworld.Reference.Libary; View open source insights on deps.dev
Purl: pkg:nuget/Rimworld.Reference.Libary

Affected ranges

Affected versions

2.*

2.4.8

2.7.8

3.*

3.0.4

4.*

4.4.7

5.*

5.3.0

7.*

7.2.5

7.7.7

8.*

8.4.0

8.6.8