MAL-2024-6217

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/xbox-promo-checker-api/MAL-2024-6217.json

JSON Data

https://api.test.osv.dev/v1/vulns/MAL-2024-6217

Published

2024-06-25T13:44:12Z

Modified

2024-10-24T01:02:00Z

Summary

Malicious code in xbox-promo-checker-api (PyPI)

Details

-= Per source details. Do not edit below this line.=-

Database specific

{
    "malicious-packages-origins": [
        {
            "source": "reversing-labs",
            "id": "RLMA-2024-05021",
            "versions": [
                "1.0"
            ],
            "import_time": "2024-06-28T02:51:10.603820206Z",
            "modified_time": "2024-06-25T13:44:12Z",
            "sha256": "fce32e8b75406ff6db9c467daca5197a76daa8ae1531a44e14e351f667356add"
        },
        {
            "source": "reversing-labs",
            "id": "RLUA-2024-09539",
            "import_time": "2024-10-24T01:00:25.521783318Z",
            "modified_time": "2024-10-16T14:54:09Z",
            "sha256": "049d4cc56acf8c2e28b68668e33c6dbaafca2aa5c2a5d8b9391b5f181de80f1e"
        }
    ]
}

References

https://research.jfrog.com/malicious-packages/

Credits

- ReversingLabs - FINDER
- - https://www.reversinglabs.com

Affected packages

PyPI / xbox-promo-checker-api

Package

Name: xbox-promo-checker-api; View open source insights on deps.dev
Purl: pkg:pypi/xbox-promo-checker-api

Affected ranges

Affected versions

1.*

1.0

Database specific

source

"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/xbox-promo-checker-api/MAL-2024-6217.json"