MAL-2024-9933

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/3web/MAL-2024-9933.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2024-9933
Published
2024-06-28T20:16:20Z
Modified
2025-12-12T20:34:41.082828Z
Summary
Malicious code in 3web (PyPI)
Details

-= Per source details. Do not edit below this line.=-

## Source: kam193 (85610f88cf59952354f1dcd0539eaab06a05421827d814d24ee3e6c733ec35f1)

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: funcaptcha-ru

Reasons (based on the campaign):

  • infostealer
Database specific 
{
    "malicious-packages-origins": [
        {
            "source": "reversing-labs",
            "id": "RLMA-2024-07769",
            "modified_time": "2024-10-16T13:48:57Z",
            "sha256": "a41c15f96ec30c93ecb085b355bf3eb2dee03f07694c82b67a58b3ec858883ad",
            "versions": [
                "1.0.0"
            ],
            "import_time": "2024-10-24T00:56:52.784806698Z"
        },
        {
            "source": "kam193",
            "id": "pypi/funcaptcha-ru/3web",
            "modified_time": "2024-06-28T20:16:20Z",
            "sha256": "0809fef1926cfc8f6eadb942c38d977fc3f33e1a2d533f551e0513d85bd5da53",
            "ranges": [
                {
                    "type": "ECOSYSTEM",
                    "events": [
                        {
                            "introduced": "0"
                        }
                    ]
                }
            ],
            "import_time": "2025-12-02T22:30:54.879254997Z"
        },
        {
            "source": "kam193",
            "id": "pypi/funcaptcha-ru/3web",
            "modified_time": "2024-06-28T20:16:20Z",
            "sha256": "85610f88cf59952354f1dcd0539eaab06a05421827d814d24ee3e6c733ec35f1",
            "ranges": [
                {
                    "type": "ECOSYSTEM",
                    "events": [
                        {
                            "introduced": "0"
                        }
                    ]
                }
            ],
            "import_time": "2025-12-02T23:07:17.921387776Z"
        },
        {
            "source": "kam193",
            "id": "pypi/funcaptcha-ru/3web",
            "modified_time": "2024-06-28T20:16:20Z",
            "sha256": "d869a84275a7ad06afa333e0bee140210b8b0cf2c593bb59d538d9d5ab52b8b8",
            "versions": [
                "1.0.0"
            ],
            "import_time": "2025-12-10T21:38:57.232122391Z"
        }
    ]
}
References
Credits

Affected packages

PyPI / 3web

Package

Name
3web
View open source insights on deps.dev
Purl
pkg:pypi/3web

Affected ranges

Affected versions

1.*
1.0.0

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/3web/MAL-2024-9933.json"