{"id":"MAL-2024-10573","summary":"Malicious code in fabrice (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: google-open-source-security (d1d6b36980b1999e5525b7490b4a430c21cb4f86493a11b76f34ae8c02bfc19c)\nThe PyPI package fabrice is a malicious package typosquatting the legitimate\npackage fabric. The package is an info stealer primarily focused on stealing\nAWS credentials.\n","modified":"2024-11-11T10:31:27Z","published":"2024-11-11T10:31:27Z","database_specific":{"malicious-packages-origins":[{"import_time":"2024-11-11T10:33:24.949171Z","modified_time":"2024-11-11T10:31:27Z","ranges":[{"events":[{"introduced":"0"}],"type":"ECOSYSTEM"}],"sha256":"d1d6b36980b1999e5525b7490b4a430c21cb4f86493a11b76f34ae8c02bfc19c","source":"google-open-source-security"}]},"references":[{"type":"ARTICLE","url":"https://socket.dev/blog/malicious-python-package-typosquats-fabric-ssh-library"}],"affected":[{"package":{"name":"fabrice","ecosystem":"PyPI","purl":"pkg:pypi/fabrice"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/fabrice/MAL-2024-10573.json"}}],"schema_version":"1.7.3","credits":[{"name":"Socket","type":"FINDER"}]}