MAL-2024-6020
See a problem?- Import Source
- https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/social-checker/MAL-2024-6020.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MAL-2024-6020
- Aliases
-
- SNYK-PYTHON-SOCIALCHECKER-5508585
- Published
- 2024-06-25T13:42:40Z
- Modified
- 2024-10-24T01:01:59Z
- Summary
- Malicious code in social-checker (PyPI)
- Details
-
-= Per source details. Do not edit below this line.=-
- Database specific
{ "malicious-packages-origins": [ { "id": "RLMA-2024-04822", "sha256": "97ac0ebe93bdf4dc56acaaee6b4574b89375915349fb3ebca696091e5ceb2bfe", "modified_time": "2024-06-25T13:42:40Z", "import_time": "2024-06-28T02:50:46.448350921Z", "versions": [ "7.2" ], "source": "reversing-labs" }, { "id": "RLUA-2024-09283", "sha256": "0fad63edae221a22896758c0e17c34e6dd4b6a9261fb17a938e0ebdf50c3a563", "modified_time": "2024-10-16T14:51:31Z", "import_time": "2024-10-24T01:00:12.263330317Z", "source": "reversing-labs" } ] }- References
-
- https://github.com/DataDog/malicious-software-packages-dataset
- https://research.jfrog.com/malicious-packages/
- https://medium.com/checkmarx-security/ml-engine-detects-pypi-packages-containing-whitesnake-malware-designed-to-steal-your-personal-7a275496f442
- https://security.snyk.io/vuln/SNYK-PYTHON-SOCIALCHECKER-5508585
- Credits
-
-
- ReversingLabs - FINDER
-
Affected packages
PyPI / social-checker
Package
- Name
- social-checker
- View open source insights on deps.dev
- Purl
- pkg:pypi/social-checker