MAL-2024-5330

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/lofter/MAL-2024-5330.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2024-5330
Published
2024-06-25T13:36:58Z
Modified
2024-10-24T01:01:58Z
Summary
Malicious code in lofter (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Database specific 
{
    "malicious-packages-origins": [
        {
            "modified_time": "2024-06-25T13:36:58Z",
            "versions": [
                "1.0"
            ],
            "sha256": "be80a122081c595cd028981816f784ba1ad650e5bf328dbd47ab06b8de008749",
            "id": "RLMA-2024-04112",
            "source": "reversing-labs",
            "import_time": "2024-06-28T02:49:22.156233536Z"
        },
        {
            "modified_time": "2024-10-16T14:43:17Z",
            "sha256": "747070d9b7ddf05e0d3f14e454e4a98a4be60496875b7d1f100e2653035a363a",
            "id": "RLUA-2024-08476",
            "source": "reversing-labs",
            "import_time": "2024-10-24T00:59:24.920531196Z"
        }
    ]
}
References
Credits

Affected packages

PyPI / lofter

Package

Name
lofter
View open source insights on deps.dev
Purl
pkg:pypi/lofter

Affected ranges

Affected versions

1.*
1.0

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/lofter/MAL-2024-5330.json"