MAL-2024-4997

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/corutil/MAL-2024-4997.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2024-4997
Published
2024-06-25T13:34:16Z
Modified
2024-10-24T01:01:58Z
Summary
Malicious code in corutil (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Database specific
{
    "malicious-packages-origins": [
        {
            "id": "RLMA-2024-03777",
            "import_time": "2024-06-28T02:48:42.262299078Z",
            "sha256": "da5bb83a03bdb325aff01b440483d5ebb880e0a16c1b7a5eb4a643d9113b65c3",
            "source": "reversing-labs",
            "modified_time": "2024-06-25T13:34:16Z",
            "versions": [
                "0.7"
            ]
        },
        {
            "id": "RLUA-2024-08070",
            "import_time": "2024-10-24T00:59:02.024463708Z",
            "sha256": "e9b8602562e09f2353c70fef799288a8c8b0badf63e5954627773b8571afc5a0",
            "source": "reversing-labs",
            "modified_time": "2024-10-16T14:39:01Z",
            "versions": [
                "0.6",
                "0.8",
                "0.9",
                "0.32",
                "0.33",
                "0.34",
                "0.35",
                "0.36",
                "0.37"
            ]
        }
    ]
}
References
Credits

Affected packages

PyPI / corutil

Package

Affected ranges

Affected versions

0.*
0.6
0.7
0.8
0.9
0.32
0.33
0.34
0.35
0.36
0.37

Database specific

source
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/corutil/MAL-2024-4997.json"