MAL-2024-5094

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/dontdownloadthis/MAL-2024-5094.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2024-5094
Published
2024-06-25T13:35:02Z
Modified
2024-10-24T01:01:58Z
Summary
Malicious code in dontdownloadthis (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "RLMA-2024-03874",
            "import_time": "2024-06-28T02:48:53.30068135Z",
            "sha256": "0252c121f831554106e7ec346cb9db65a2884a6dc927b67e1be3f34277814bcf",
            "source": "reversing-labs",
            "modified_time": "2024-06-25T13:35:02Z",
            "versions": [
                "0.0.0"
            ]
        },
        {
            "id": "RLUA-2024-08171",
            "import_time": "2024-10-24T00:59:09.194545401Z",
            "sha256": "f18edf4b38e423842f1654acacfb68a2ab0fda48b2e46b96ea5a321da52fbb9c",
            "source": "reversing-labs",
            "modified_time": "2024-10-16T14:40:04Z"
        }
    ]
}
References
Credits

Affected packages

PyPI / dontdownloadthis

Package

Name
dontdownloadthis
View open source insights on deps.dev
Purl
pkg:pypi/dontdownloadthis

Affected ranges

Affected versions

0.*
0.0.0

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/dontdownloadthis/MAL-2024-5094.json"