MAL-2024-5260
See a problem?- Import Source
- https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/infosys/MAL-2024-5260.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MAL-2024-5260
- Aliases
-
- SNYK-PYTHON-INFOSYS-3177762
- Published
- 2024-06-25T13:36:24Z
- Modified
- 2024-10-24T01:01:58Z
- Summary
- Malicious code in infosys (PyPI)
- Details
-
-= Per source details. Do not edit below this line.=-
- Database specific
{ "malicious-packages-origins": [ { "sha256": "1c2f426ebf2db3c5369afcbf6412b59f3f5777341dda32befcd73142e97984c6", "import_time": "2024-06-28T02:49:13.73411358Z", "versions": [ "0.1.0" ], "id": "RLMA-2024-04042", "source": "reversing-labs", "modified_time": "2024-06-25T13:36:24Z" }, { "sha256": "056f198de8b1739b45620bf5e095e14665e33934e2d2fc9518ea2b03cffac7a0", "import_time": "2024-10-24T00:59:20.327746838Z", "id": "RLUA-2024-08402", "source": "reversing-labs", "modified_time": "2024-10-16T14:42:31Z" } ] }- References
-
- https://github.com/DataDog/malicious-software-packages-dataset
- https://security.snyk.io/vuln/SNYK-PYTHON-INFOSYS-3177762
- https://www.bleepingcomputer.com/news/security/hackers-bombard-pypi-platform-with-information-stealing-malware
- https://blog.phylum.io/phylum-discovers-new-stealer-variants-in-burgeoning-pypi-supply-chain-attack/
- Credits
-
-
- ReversingLabs - FINDER
-
Affected packages
PyPI / infosys
Package
- Name
- infosys
- View open source insights on deps.dev
- Purl
- pkg:pypi/infosys