MAL-2024-5130

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/fastapi-https/MAL-2024-5130.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2024-5130
Published
2024-06-25T13:35:19Z
Modified
2024-10-24T01:01:58Z
Summary
Malicious code in fastapi-https (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "RLMA-2024-03910",
            "sha256": "c908ed451258f1af712a8817dc350ecf9015302c676c6f12d656b27c7fd7ed0e",
            "source": "reversing-labs",
            "versions": [
                "0.0.8",
                "0.0.1",
                "0.0.2"
            ],
            "modified_time": "2024-06-25T13:35:19Z",
            "import_time": "2024-06-28T02:48:57.653710647Z"
        },
        {
            "id": "RLUA-2024-08266",
            "sha256": "56dcae48ddcaadde6c81d4ec6daa1027c2c5a713bbeb987170d5e4d038e2cd4e",
            "source": "reversing-labs",
            "modified_time": "2024-10-16T14:41:05Z",
            "import_time": "2024-10-24T00:59:11.590746151Z"
        }
    ]
}
References
Credits

Affected packages

PyPI / fastapi-https

Package

Name
fastapi-https
View open source insights on deps.dev
Purl
pkg:pypi/fastapi-https

Affected ranges

Affected versions

0.*
0.0.1
0.0.2
0.0.8

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/fastapi-https/MAL-2024-5130.json"