{"id":"MAL-2024-10026","summary":"Malicious code in exodusdecoderss (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","aliases":["SNYK-PYTHON-EXODUSDECODERSS-8145478"],"modified":"2025-03-03T15:42:05.940582Z","published":"2024-10-16T14:41:00Z","database_specific":{"malicious-packages-origins":[{"sha256":"521056772f49e64b06ef4e697a7269a60ed2dc1c0911e70bac74f131d8948f51","source":"reversing-labs","versions":["1.4.3","1.4.4"],"id":"RLMA-2024-08259","import_time":"2024-10-24T00:56:59.507845086Z","modified_time":"2024-10-16T14:41:00Z"},{"import_time":"2024-12-09T14:38:53.520174894Z","modified_time":"2024-12-09T06:50:12Z","sha256":"819d399f29357d4312ec1beaf85f9552d3221a1692439c9978472755af514451","source":"reversing-labs","id":"RLUA-2024-11035"},{"id":"RLUA-2025-01214","import_time":"2025-03-03T15:07:34.286952218Z","modified_time":"2025-03-03T13:44:52Z","sha256":"93c84b0dec02e773e87245d7478f96ed9f4449f222dc4f70d4e4409da5e38e6b","source":"reversing-labs"}]},"references":[{"type":"ARTICLE","url":"https://checkmarx.com/blog/crypto-stealing-code-lurking-in-python-package-dependencies"},{"type":"ADVISORY","url":"https://security.snyk.io/vuln/SNYK-PYTHON-EXODUSDECODERSS-8145478"}],"affected":[{"package":{"name":"exodusdecoderss","ecosystem":"PyPI","purl":"pkg:pypi/exodusdecoderss"},"versions":["1.4.3","1.4.4"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/exodusdecoderss/MAL-2024-10026.json"}}],"schema_version":"1.7.3","credits":[{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}