{"id":"MAL-2024-12301","summary":"Malicious code in lwplugin (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (c6d463791b2f4dc4cdb8a0b3961dbb9b956fc3f0e0ad974fc407211ae9d2e3a8)\nThe attached DLL is infected with a very high detection rate\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2024-10-old-lwplugin\n\n\nReasons (based on the campaign):\n\n\n - other\n","modified":"2025-12-12T20:38:41.127725Z","published":"2024-10-14T18:04:56Z","database_specific":{"malicious-packages-origins":[{"import_time":"2025-12-02T22:30:55.318823472Z","modified_time":"2024-10-14T18:04:56Z","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"sha256":"b3dc7e66e833135fe0bc581d2880bb8347f1334d9d62fb9a064118c8bf5e40a4","source":"kam193","id":"pypi/2024-10-old-lwplugin/lwplugin"},{"id":"pypi/2024-10-old-lwplugin/lwplugin","import_time":"2025-12-02T23:07:18.345623322Z","modified_time":"2024-10-14T18:04:56Z","ranges":[{"events":[{"introduced":"0"}],"type":"ECOSYSTEM"}],"sha256":"c6d463791b2f4dc4cdb8a0b3961dbb9b956fc3f0e0ad974fc407211ae9d2e3a8","source":"kam193"},{"import_time":"2025-12-10T21:38:57.578977612Z","modified_time":"2024-10-14T18:04:56Z","sha256":"e8fce70e75b5d8eeba8e1236a86625fbd9df074545d305d2122549a4b3c7faf5","source":"kam193","versions":["0.0.5"],"id":"pypi/2024-10-old-lwplugin/lwplugin"}]},"references":[{"type":"EVIDENCE","url":"https://www.virustotal.com/gui/file/6ac5a03985a9305a5660c5823e221e40736427851ce9d99c57fb346a00d44322/detection"},{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/lwplugin"}],"affected":[{"package":{"name":"lwplugin","ecosystem":"PyPI","purl":"pkg:pypi/lwplugin"},"versions":["0.0.5"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/lwplugin/MAL-2024-12301.json"}}],"schema_version":"1.7.3","credits":[{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"]},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}