{"id":"MAL-2024-11518","summary":"Malicious code in aiocpa (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","aliases":["SNYK-PYTHON-AIOCPA-8442272"],"modified":"2025-12-24T10:29:10.497394Z","published":"2024-12-09T06:49:42Z","database_specific":{"malicious-packages-origins":[{"id":"RLMA-2024-10961","import_time":"2024-12-09T14:38:40.337865583Z","modified_time":"2024-12-09T06:49:42Z","sha256":"158d78f4b656b14428ccb76d8fa8589f2f815b0b76943230f7ca5049aa4f7816","source":"reversing-labs","versions":["0.1.13","0.1.14"]},{"modified_time":"2025-12-23T08:37:49Z","sha256":"9ac16efaabf430d615ac6642aec7c2664ad2739fd11aab83fd63f2ee65f18d5b","source":"reversing-labs","id":"RLUA-2025-06548","import_time":"2025-12-24T10:07:36.370412215Z"}]},"references":[{"type":"ADVISORY","url":"https://security.snyk.io/vuln/SNYK-PYTHON-AIOCPA-8442272"},{"type":"ARTICLE","url":"https://blog.phylum.io/python-crypto-library-updated-to-steal-private-keys"},{"type":"ARTICLE","url":"https://www.reversinglabs.com/blog/malicious-pypi-crypto-pay-package-aiocpa-implants-infostealer-code"}],"affected":[{"package":{"name":"aiocpa","ecosystem":"PyPI","purl":"pkg:pypi/aiocpa"},"versions":["0.1.13","0.1.14"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/aiocpa/MAL-2024-11518.json"}}],"schema_version":"1.7.3","credits":[{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}