{"id":"MAL-2022-7424","summary":"Malicious code in free-net-vpn2 (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (918a0f985a93815d37d9480f97dd5203b78834142904ae50550bd431ca52c05b)\nSecurity researchers at Check Point Research discovered a malicious package called `free-net-vpn2` that targets environment variables. PyPI has since removed `free-net-vpn2`.\n","aliases":["GHSA-rqcv-3wp9-w2r3"],"modified":"2023-11-08T04:22:52.442410Z","published":"2022-08-30T19:38:36Z","database_specific":{"malicious-packages-origins":[{"id":"GHSA-rqcv-3wp9-w2r3","import_time":"2023-07-30T21:58:25.624080216Z","modified_time":"2022-08-30T19:38:38Z","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"sha256":"918a0f985a93815d37d9480f97dd5203b78834142904ae50550bd431ca52c05b","source":"ghsa-malware"}]},"references":[{"type":"WEB","url":"https://pypi.org/project/free-net-vpn2"},{"type":"WEB","url":"https://research.checkpoint.com/2022/cloudguard-spectral-detects-several-malicious-packages-on-pypi-the-official-software-repository-for-python-developers/"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-rqcv-3wp9-w2r3"}],"affected":[{"package":{"name":"free-net-vpn2","ecosystem":"PyPI","purl":"pkg:pypi/free-net-vpn2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"name":"Embedded Malicious Code","cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature."}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/free-net-vpn2/MAL-2022-7424.json"}}],"schema_version":"1.7.3"}