MAL-2024-6049
See a problem?- Import Source
- https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/style-py/MAL-2024-6049.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MAL-2024-6049
- Aliases
-
- SNYK-PYTHON-STYLEPY-3262850
- Published
- 2024-06-25T13:42:54Z
- Modified
- 2024-10-24T01:01:59Z
- Summary
- Malicious code in style-py (PyPI)
- Details
-
-= Per source details. Do not edit below this line.=-
- Database specific
{ "malicious-packages-origins": [ { "sha256": "fc0f246845feaf237bcc93b2078453b5fb78025a8d3ed9dcbba404c9c2cbc4b6", "import_time": "2024-06-28T02:50:50.109242483Z", "versions": [ "3.0", "3.1" ], "id": "RLMA-2024-04852", "source": "reversing-labs", "modified_time": "2024-06-25T13:42:54Z" }, { "sha256": "42d605c6ca1d4646f4b79459c5c7001f3f69fa4cfdb5e6bdaf88a6dcea530dd7", "import_time": "2024-10-24T01:00:14.139466045Z", "id": "RLUA-2024-09320", "source": "reversing-labs", "modified_time": "2024-10-16T14:51:55Z" } ] }- References
-
- https://blog.phylum.io/a-deep-dive-into-powerat-a-newly-discovered-stealer-rat-combo-polluting-pypi/
- https://security.snyk.io/vuln/SNYK-PYTHON-STYLEPY-3262850
- https://www.bleepingcomputer.com/news/security/malicious-pypi-packages-create-cloudflare-tunnels-to-bypass-firewalls
- https://research.jfrog.com/malicious-packages/
- Credits
-
-
- ReversingLabs - FINDER
-
Affected packages
PyPI / style-py
Package
- Name
- style-py
- View open source insights on deps.dev
- Purl
- pkg:pypi/style-py