MAL-2024-6002

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/sherm/MAL-2024-6002.json
JSON Data
https://api.test.osv.dev/v1/vulns/MAL-2024-6002
Published
2024-06-25T13:42:31Z
Modified
2024-10-24T01:01:59Z
Summary
Malicious code in sherm (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Database specific 
{
    "malicious-packages-origins": [
        {
            "sha256": "68866b103d0b29f1d66d05977277c0ad042a8e4dee503f255e9a7dd5d381a0fd",
            "source": "reversing-labs",
            "import_time": "2024-06-28T02:50:44.248135694Z",
            "modified_time": "2024-06-25T13:42:31Z",
            "versions": [
                "1.0"
            ],
            "id": "RLMA-2024-04803"
        },
        {
            "sha256": "24fa98c3ad024c7c25d987b31d27b384994cab256f4aac81b735cdc49ba42db5",
            "source": "reversing-labs",
            "import_time": "2024-10-24T01:00:11.137068256Z",
            "modified_time": "2024-10-16T14:51:20Z",
            "versions": [
                "0.0.1"
            ],
            "id": "RLUA-2024-09265"
        }
    ]
}
References
Credits

Affected packages

PyPI / sherm

Package

Name
sherm
View open source insights on deps.dev
Purl
pkg:pypi/sherm

Affected ranges

Affected versions

0.*
0.0.1
1.*
1.0

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/sherm/MAL-2024-6002.json"