MAL-2024-9987

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/etherem/MAL-2024-9987.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2024-9987
Published
2024-06-28T20:16:20Z
Modified
2025-12-12T20:37:02.988120Z
Summary
Malicious code in etherem (PyPI)
Details

-= Per source details. Do not edit below this line.=-

## Source: kam193 (7262c9095d12ad225212433e5d5ffe489471cc9b91babb7c0b84f9babccf609c)

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: funcaptcha-ru

Reasons (based on the campaign):

  • infostealer
Database specific
{
    "malicious-packages-origins": [
        {
            "import_time": "2024-10-24T00:56:56.698495188Z",
            "sha256": "e0d168c56bbad64608d826f80b4ecf9015ec087c8fbcd003804822328b73753e",
            "modified_time": "2024-10-16T14:40:31Z",
            "id": "RLMA-2024-08212",
            "versions": [
                "1.0.0"
            ],
            "source": "reversing-labs"
        },
        {
            "import_time": "2025-12-02T22:30:55.148299324Z",
            "modified_time": "2024-06-28T20:16:20Z",
            "ranges": [
                {
                    "events": [
                        {
                            "introduced": "0"
                        }
                    ],
                    "type": "ECOSYSTEM"
                }
            ],
            "id": "pypi/funcaptcha-ru/etherem",
            "sha256": "e76d2f13064340b6c25a91602a7cd3f47bc0279e11270c2d5f7a0c92fdfd143f",
            "source": "kam193"
        },
        {
            "import_time": "2025-12-02T23:07:18.153783482Z",
            "modified_time": "2024-06-28T20:16:20Z",
            "ranges": [
                {
                    "events": [
                        {
                            "introduced": "0"
                        }
                    ],
                    "type": "ECOSYSTEM"
                }
            ],
            "id": "pypi/funcaptcha-ru/etherem",
            "sha256": "7262c9095d12ad225212433e5d5ffe489471cc9b91babb7c0b84f9babccf609c",
            "source": "kam193"
        },
        {
            "import_time": "2025-12-10T21:38:57.435631091Z",
            "sha256": "010630ebea3e4f6f18003eab39b662cd10efb48bd11bbc38df50f90a77314bee",
            "modified_time": "2024-06-28T20:16:20Z",
            "id": "pypi/funcaptcha-ru/etherem",
            "versions": [
                "1.0.0"
            ],
            "source": "kam193"
        }
    ]
}
References
Credits

Affected packages

PyPI / etherem

Package

Affected ranges

Affected versions

1.*

1.0.0