{"id":"MAL-2023-1412","summary":"Malicious code in spamsynonym (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (bbc650ef44d412610406a674ac1fce3dcb717b01d175614f158016f47b53b1ce)\nThe OpenSSF Package Analysis project identified 'spamsynonym' @ 1.1.1 (pypi) as malicious.\n\nIt is considered malicious because:\n- The package communicates with a domain associated with malicious activity.\n","modified":"2024-06-28T02:53:20Z","published":"2023-05-10T11:43:49Z","database_specific":{"malicious-packages-origins":[{"import_time":"2023-08-10T06:16:59.753040715Z","modified_time":"2023-05-10T11:44:48.915196661Z","sha256":"bbc650ef44d412610406a674ac1fce3dcb717b01d175614f158016f47b53b1ce","source":"ossf-package-analysis","versions":["1.1.1"]},{"import_time":"2023-08-10T06:16:59.484145793Z","modified_time":"2023-05-10T11:43:49.241666354Z","sha256":"bf14d84887774e0581d5695312e48271a7c575f73bab7bcfa180fd452304d6b8","source":"ossf-package-analysis","versions":["1.0.0"]},{"id":"RLMA-2024-04831","import_time":"2024-06-28T02:50:47.599126276Z","modified_time":"2024-06-25T13:42:44Z","sha256":"91489cc9401e52668e5400fc7200e085b9489d5bdd81db8d8db2d2cb2b3ca426","source":"reversing-labs","versions":["1.1.1","1.0.0"]}]},"affected":[{"package":{"name":"spamsynonym","ecosystem":"PyPI","purl":"pkg:pypi/spamsynonym"},"versions":["1.1.1","1.0.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/spamsynonym/MAL-2023-1412.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}