{"id":"MAL-2024-1254","summary":"Malicious code in reqargs (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (9d1ba9bc54763d8ec8336f0edc8d5997d5fb080801556f288a4935dac06d4878)\nThe OpenSSF Package Analysis project identified 'reqargs' @ 1.4 (pypi) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","modified":"2024-04-12T03:34:32Z","published":"2024-04-11T07:56:53Z","database_specific":{"malicious-packages-origins":[{"import_time":"2024-04-12T03:34:12.241808019Z","modified_time":"2024-04-11T12:58:37Z","sha256":"9d1ba9bc54763d8ec8336f0edc8d5997d5fb080801556f288a4935dac06d4878","source":"ossf-package-analysis","versions":["1.4"]},{"import_time":"2024-04-12T03:34:12.047119116Z","modified_time":"2024-04-11T07:56:53Z","sha256":"e0f9f9aaa83201345dd70d47a4e9a773ddacc69fedccf38ab7ddb4ab192efb45","source":"ossf-package-analysis","versions":["1.2"]},{"modified_time":"2024-04-11T10:11:36Z","sha256":"ed249f273ab247bc45f55be79280915985c5f8db08317e21a8bd92571bf5f7b4","source":"ossf-package-analysis","versions":["1.3"],"import_time":"2024-04-12T03:34:12.143025384Z"}]},"affected":[{"package":{"name":"reqargs","ecosystem":"PyPI","purl":"pkg:pypi/reqargs"},"versions":["1.4","1.2","1.3"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/reqargs/MAL-2024-1254.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}