MAL-2024-5653

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/pyclonerfile/MAL-2024-5653.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2024-5653
Published
2024-06-25T13:39:33Z
Modified
2024-10-24T01:01:59Z
Summary
Malicious code in pyclonerfile (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Database specific 
{
    "malicious-packages-origins": [
        {
            "modified_time": "2024-06-25T13:39:33Z",
            "versions": [
                "1.0.4",
                "1.0.6",
                "1.0.0"
            ],
            "sha256": "aea398ef628d59940060ad6a65c5f26bf5405f42e59cf1ef992cb6120a479808",
            "id": "RLMA-2024-04436",
            "source": "reversing-labs",
            "import_time": "2024-06-28T02:49:59.935922379Z"
        },
        {
            "modified_time": "2024-10-16T14:47:19Z",
            "versions": [
                "1.0.1",
                "1.0.2",
                "1.0.3",
                "1.0.5"
            ],
            "sha256": "19408d31a17ab601fb25ea263aecb9fd8ae12a2242b444167e54bdab702d083e",
            "id": "RLUA-2024-08871",
            "source": "reversing-labs",
            "import_time": "2024-10-24T00:59:47.382764645Z"
        }
    ]
}
References
Credits

Affected packages

PyPI / pyclonerfile

Package

Name
pyclonerfile
View open source insights on deps.dev
Purl
pkg:pypi/pyclonerfile

Affected ranges

Affected versions

1.*
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/pyclonerfile/MAL-2024-5653.json"