{"id":"MAL-2024-10104","summary":"Malicious code in phantomdecoderss (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","aliases":["SNYK-PYTHON-PHANTOMDECODERSS-8145476"],"modified":"2025-03-03T15:42:06.018164Z","published":"2024-10-16T14:45:19Z","database_specific":{"malicious-packages-origins":[{"versions":["1.6.8","1.6.9"],"modified_time":"2024-10-16T14:45:19Z","source":"reversing-labs","sha256":"6bcbad52418c3b722436a78d822dd727899a33b4dbed72f3efa47903d16c30f5","import_time":"2024-10-24T00:57:04.715799934Z","id":"RLMA-2024-08674"},{"modified_time":"2024-12-09T06:50:47Z","source":"reversing-labs","sha256":"1a528460cc59dbb11e24d55133e19937bc512099b0a72b130dd6d0e415b73641","import_time":"2024-12-09T14:38:53.710663479Z","id":"RLUA-2024-11114"},{"modified_time":"2025-03-03T13:45:07Z","source":"reversing-labs","sha256":"0f3a6d5432a3ff6c47f9765195b8cdffa35d2fc3500b55464b28704aec9325c8","import_time":"2025-03-03T15:07:34.387297284Z","id":"RLUA-2025-01227"}]},"references":[{"type":"ARTICLE","url":"https://checkmarx.com/blog/crypto-stealing-code-lurking-in-python-package-dependencies"},{"type":"ADVISORY","url":"https://security.snyk.io/vuln/SNYK-PYTHON-PHANTOMDECODERSS-8145476"}],"affected":[{"package":{"name":"phantomdecoderss","ecosystem":"PyPI","purl":"pkg:pypi/phantomdecoderss"},"versions":["1.6.8","1.6.9"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/phantomdecoderss/MAL-2024-10104.json"}}],"schema_version":"1.7.3","credits":[{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}