MAL-2024-5761

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/pyportfoliopt/MAL-2024-5761.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2024-5761

Published

2024-06-25T13:40:33Z

Modified

2024-10-24T01:01:59Z

Summary

Malicious code in pyportfoliopt (PyPI)

Details

-= Per source details. Do not edit below this line.=-

Database specific

{
    "malicious-packages-origins":  [
        {
            "id":  "RLMA-2024-04557",
            "import_time":  "2024-06-28T02:50:14.291940822Z",
            "modified_time":  "2024-06-25T13:40:33Z",
            "sha256":  "3f26dee0311da2ceed6101ed8787ee90713afe442d7649f8c254e386e2781da0",
            "source":  "reversing-labs",
            "versions":  [
                "1.5.5",
                "1.5.6",
                "1.5.4"
            ]
        },
        {
            "id":  "RLUA-2024-08987",
            "import_time":  "2024-10-24T00:59:54.700396582Z",
            "modified_time":  "2024-10-16T14:48:31Z",
            "sha256":  "3402c69aa94b3a1541bded44c031af249cd1b28be179ea023e2676186c213570",
            "source":  "reversing-labs"
        }
    ]
}

References

https://blog.virustotal.com/2023/06/inside-of-wasps-nest-deep-dive-into.html

Credits

- ReversingLabs - FINDER
- - https://www.reversinglabs.com

Affected packages

PyPI / pyportfoliopt

Package

Name: pyportfoliopt; View open source insights on deps.dev
Purl: pkg:pypi/pyportfoliopt

Affected ranges

Affected versions

1.*

1.5.4

1.5.5

1.5.6

Database specific

source

"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/pyportfoliopt/MAL-2024-5761.json"