MAL-2024-4795

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/bettercolor/MAL-2024-4795.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2024-4795

Published

2024-06-25T13:32:38Z

Modified

2024-10-24T01:01:57Z

Summary

Malicious code in bettercolor (PyPI)

Details

-= Per source details. Do not edit below this line.=-

Database specific

{
    "malicious-packages-origins": [
        {
            "sha256": "ab82f8fcff2f39f0903305b6e3f8dd15b4a1fa9d84a6e083a0fa50e3afdb2ece",
            "import_time": "2024-06-28T02:48:19.262819014Z",
            "versions": [
                "1",
                "3",
                "2"
            ],
            "id": "RLMA-2024-03575",
            "source": "reversing-labs",
            "modified_time": "2024-06-25T13:32:38Z"
        },
        {
            "sha256": "f1ec4271cc6cd13936f5eaaff64ede671c26774461aa0f801edd9296b9581342",
            "import_time": "2024-10-24T00:58:48.726322719Z",
            "id": "RLUA-2024-07854",
            "source": "reversing-labs",
            "modified_time": "2024-10-16T14:36:43Z"
        }
    ]
}

References

https://github.com/DataDog/malicious-software-packages-dataset

Credits

- ReversingLabs - FINDER
- - https://www.reversinglabs.com

Affected packages

PyPI / bettercolor

Package

Name: bettercolor; View open source insights on deps.dev
Purl: pkg:pypi/bettercolor

MAL-2024-4795

Affected packages

PyPI / bettercolor

Package

Affected ranges

Affected versions

Other