MAL-2024-5385

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/multihttp/MAL-2024-5385.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2024-5385
Published
2024-06-25T13:37:24Z
Modified
2024-10-24T01:01:58Z
Summary
Malicious code in multihttp (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Database specific 
{
    "malicious-packages-origins": [
        {
            "import_time": "2024-06-28T02:49:28.474989881Z",
            "id": "RLMA-2024-04167",
            "modified_time": "2024-06-25T13:37:24Z",
            "versions": [
                "2.31.10",
                "2.31.11"
            ],
            "source": "reversing-labs",
            "sha256": "d7bab33555caf99b3a41ba1bbe7298da490febd4c5f6b95c57876d6f049b3f45"
        },
        {
            "import_time": "2024-10-24T00:59:28.945164339Z",
            "id": "RLUA-2024-08540",
            "modified_time": "2024-10-16T14:43:56Z",
            "source": "reversing-labs",
            "sha256": "8627e10e74b409b476f71d824dda009db0e53425fe9101ccfa773d9eb4578a16"
        }
    ]
}
References
Credits

Affected packages

PyPI / multihttp

Package

Name
multihttp
View open source insights on deps.dev
Purl
pkg:pypi/multihttp

Affected ranges

Affected versions

2.*

2.31.10
2.31.11