{"id":"MAL-2023-1359","summary":"Malicious code in bytedtrace (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (0daa5ac7233e9a742ef31e4ba3acaa8bfe5120eb7247f9e0cc20bfd45194cd76)\nThe OpenSSF Package Analysis project identified 'bytedtrace' @ 0.1.2 (pypi) as malicious.\n\nIt is considered malicious because:\n- The package executes one or more commands associated with malicious behavior.\n","modified":"2023-08-10T06:17:50Z","published":"2023-06-06T16:17:16Z","database_specific":{"malicious-packages-origins":[{"modified_time":"2023-06-06T16:36:23.919640486Z","sha256":"0daa5ac7233e9a742ef31e4ba3acaa8bfe5120eb7247f9e0cc20bfd45194cd76","source":"ossf-package-analysis","versions":["0.1.2"],"import_time":"2023-08-10T06:17:24.042883504Z"},{"import_time":"2023-08-10T06:17:25.014335925Z","modified_time":"2023-06-06T16:40:33.408806259Z","sha256":"3155f03f890b63eed5baaec240b2b1a7c7b19d2b426c599f253c0b0db51e8226","source":"ossf-package-analysis","versions":["0.1.6"]},{"modified_time":"2023-06-06T16:38:33.132302701Z","sha256":"45ce0e660393e05d6d988b70a83df1ee7303d49a9e7c76ee55d9d85dccd47362","source":"ossf-package-analysis","versions":["0.1.8"],"import_time":"2023-08-10T06:17:24.297901582Z"},{"import_time":"2023-08-10T06:17:25.51853633Z","modified_time":"2023-06-06T16:45:12.703034175Z","sha256":"69a6ea92bea6374f23757045ea8ee474f62f6a640014abf762b3cdd0da2dedb2","source":"ossf-package-analysis","versions":["0.1.0"]},{"source":"ossf-package-analysis","versions":["0.1.5"],"import_time":"2023-08-10T06:17:25.261863577Z","modified_time":"2023-06-06T16:42:44.001780687Z","sha256":"8d93428c1d0db54b3f2966af04c4a02c514b1f3eb44f0681c6dccbc88d1af928"},{"versions":["0.1.1"],"import_time":"2023-08-10T06:17:23.793898591Z","modified_time":"2023-06-06T16:34:00.854797465Z","sha256":"98f85e99ff849816c10f8a5f6dfcfeb2683a18bf5c84db5bc9d0f853b0a07034","source":"ossf-package-analysis"},{"import_time":"2023-08-10T06:17:24.773881236Z","modified_time":"2023-06-06T16:39:52.022692713Z","sha256":"99c6463a796c1dc34ed9430c6f62e385a50982ce5381c125b250556bbaddea8c","source":"ossf-package-analysis","versions":["0.1.4"]},{"source":"ossf-package-analysis","versions":["0.1.9"],"import_time":"2023-08-10T06:17:23.54379635Z","modified_time":"2023-06-06T16:17:16.505787988Z","sha256":"c5d7a182be84cc13fbe92517067794e7aa073ce97ed6a91cf6ef8c6d594b57ed"},{"import_time":"2023-08-10T06:17:24.540510417Z","modified_time":"2023-06-06T16:38:56.884658493Z","sha256":"d35fefa29ec9e6392d0d2abafb9a9874c3c2e76b942ee2716efd2b2bfa27cbaa","source":"ossf-package-analysis","versions":["0.1.3"]}]},"affected":[{"package":{"name":"bytedtrace","ecosystem":"PyPI","purl":"pkg:pypi/bytedtrace"},"versions":["0.1.2","0.1.6","0.1.8","0.1.0","0.1.5","0.1.1","0.1.4","0.1.9","0.1.3"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/bytedtrace/MAL-2023-1359.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}