mal-2024-1254
Vulnerability from ossf_malicious_packages
Malicious code in reqargs (PyPI)
-= Per source details. Do not edit below this line.=-
Source: ossf-package-analysis (9d1ba9bc54763d8ec8336f0edc8d5997d5fb080801556f288a4935dac06d4878)
The OpenSSF Package Analysis project identified 'reqargs' @ 1.4 (pypi) as malicious.
It is considered malicious because:
- The package communicates with a domain associated with malicious activity.
{ "affected": [ { "package": { "ecosystem": "PyPI", "name": "reqargs" }, "versions": [ "1.4", "1.2", "1.3" ] } ], "credits": [ { "contact": [ "https://github.com/ossf/package-analysis", "https://openssf.slack.com/channels/package_analysis" ], "name": "OpenSSF: Package Analysis", "type": "FINDER" } ], "database_specific": { "malicious-packages-origins": [ { "import_time": "2024-04-12T03:34:12.241808019Z", "modified_time": "2024-04-11T12:58:37Z", "sha256": "9d1ba9bc54763d8ec8336f0edc8d5997d5fb080801556f288a4935dac06d4878", "source": "ossf-package-analysis", "versions": [ "1.4" ] }, { "import_time": "2024-04-12T03:34:12.047119116Z", "modified_time": "2024-04-11T07:56:53Z", "sha256": "e0f9f9aaa83201345dd70d47a4e9a773ddacc69fedccf38ab7ddb4ab192efb45", "source": "ossf-package-analysis", "versions": [ "1.2" ] }, { "import_time": "2024-04-12T03:34:12.143025384Z", "modified_time": "2024-04-11T10:11:36Z", "sha256": "ed249f273ab247bc45f55be79280915985c5f8db08317e21a8bd92571bf5f7b4", "source": "ossf-package-analysis", "versions": [ "1.3" ] } ] }, "details": "\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (9d1ba9bc54763d8ec8336f0edc8d5997d5fb080801556f288a4935dac06d4878)\nThe OpenSSF Package Analysis project identified \u0027reqargs\u0027 @ 1.4 (pypi) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n", "id": "MAL-2024-1254", "modified": "2024-04-12T03:34:32Z", "published": "2024-04-11T07:56:53Z", "schema_version": "1.5.0", "summary": "Malicious code in reqargs (PyPI)" }
Loading...