{"id":"MAL-2024-4432","summary":"Malicious code in C1.Wіn (NuGet)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","modified":"2024-10-24T01:01:57Z","published":"2024-06-25T13:28:35Z","database_specific":{"malicious-packages-origins":[{"id":"RLMA-2024-03221","import_time":"2024-06-28T02:47:37.45517498Z","modified_time":"2024-06-25T13:28:35Z","sha256":"5d8df9ee634c7aa556f082d54134a5c573649653b4b32506e1b34949ab072337","source":"reversing-labs","versions":["6.0.20232.624","6.0.20232.625","6.0.20232.621","6.0.20232.629","6.0.20232.631","6.0.20232.632","6.0.20232.626","6.0.20232.627","6.0.20232.622","6.0.20232.623","6.0.20232.628","6.0.20232.630","6.0.20232.620"]},{"modified_time":"2024-10-16T13:47:35Z","sha256":"428c57eb6b304618bb459055da68ce1026446aae3588cdfb49f9f0e79710160c","source":"reversing-labs","id":"RLUA-2024-07642","import_time":"2024-10-24T00:58:35.928576642Z"}]},"references":[{"type":"ARTICLE","url":"https://www.reversinglabs.com/blog/malicious-nuget-campaign-uses-homoglyphs-and-il-weaving-to-fool-devs"}],"affected":[{"package":{"name":"C1.Wіn","ecosystem":"NuGet","purl":"pkg:nuget/C1.W%D1%96n"},"versions":["6.0.20232.624","6.0.20232.625","6.0.20232.621","6.0.20232.629","6.0.20232.631","6.0.20232.632","6.0.20232.626","6.0.20232.627","6.0.20232.622","6.0.20232.623","6.0.20232.628","6.0.20232.630","6.0.20232.620"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/nuget/c1.wіn/MAL-2024-4432.json"}}],"schema_version":"1.7.3","credits":[{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}