MAL-2024-5450

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/paintpy/MAL-2024-5450.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2024-5450
Aliases
  • SNYK-PYTHON-PAINTPY-3179268
Published
2024-06-25T13:37:55Z
Modified
2024-10-24T01:01:58Z
Summary
Malicious code in paintpy (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "RLMA-2024-04232",
            "import_time": "2024-06-28T02:49:35.990027087Z",
            "modified_time": "2024-06-25T13:37:55Z",
            "sha256": "38c13824b7552e8722b08683e99e7946238f7de1f4360aaa16f74034e3d77157",
            "source": "reversing-labs",
            "versions": [
                "2.0"
            ]
        },
        {
            "id": "RLUA-2024-08656",
            "import_time": "2024-10-24T00:59:33.436538878Z",
            "modified_time": "2024-10-16T14:45:07Z",
            "sha256": "747adc1e65d8aa59e56562f149cee7fb04f763a42cc43307e2e91ee2bd6f93d7",
            "source": "reversing-labs"
        }
    ]
}
References
Credits

Affected packages

PyPI / paintpy

Package

Name
paintpy
View open source insights on deps.dev
Purl
pkg:pypi/paintpy

Affected ranges

Affected versions

2.*
2.0

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/paintpy/MAL-2024-5450.json"