MAL-2024-5637

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/py2colors/MAL-2024-5637.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2024-5637

Published

2024-06-25T13:39:25Z

Modified

2024-10-24T01:01:59Z

Summary

Malicious code in py2colors (PyPI)

Details

-= Per source details. Do not edit below this line.=-

Database specific

{
    "malicious-packages-origins": [
        {
            "modified_time": "2024-06-25T13:39:25Z",
            "versions": [
                "0.0.0"
            ],
            "sha256": "d0cd18c62122f0529a973405883c14ecb5c920384e2027e5c4071fa5f85cdbbf",
            "id": "RLMA-2024-04419",
            "source": "reversing-labs",
            "import_time": "2024-06-28T02:49:58.040819988Z"
        },
        {
            "modified_time": "2024-10-16T14:47:08Z",
            "sha256": "6d40cdf5cf2a7fc8fd696e0c558701fd22b0827c74e398a805ed5b5342ab9ed2",
            "id": "RLUA-2024-08853",
            "source": "reversing-labs",
            "import_time": "2024-10-24T00:59:46.108218599Z"
        }
    ]
}

References

https://research.jfrog.com/malicious-packages/

Credits

- ReversingLabs - FINDER
- - https://www.reversinglabs.com

Affected packages

PyPI / py2colors

Package

Name: py2colors; View open source insights on deps.dev
Purl: pkg:pypi/py2colors

Affected ranges

Affected versions

0.*

0.0.0

Database specific

source

"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/py2colors/MAL-2024-5637.json"