{"id":"MAL-2024-4437","summary":"Malicious code in CData.Salesforce.Net.Framework (NuGet)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","modified":"2024-10-24T01:01:57Z","published":"2024-06-25T13:28:41Z","database_specific":{"malicious-packages-origins":[{"id":"RLMA-2024-03228","import_time":"2024-06-28T02:47:38.222262813Z","modified_time":"2024-06-25T13:28:41Z","sha256":"61da27d077bd7524a0587dbdb6b81f1c7765eb8f0bcabaf79b84b2dd7c7aff69","source":"reversing-labs","versions":["23.0.8669","23.0.8671","23.0.8670"]},{"id":"RLUA-2024-07644","import_time":"2024-10-24T00:58:36.15299323Z","modified_time":"2024-10-16T13:47:36Z","sha256":"0885e7a6d6a9d8b13a3b171cd7355dbdf16af545bacda474983da110e04578b9","source":"reversing-labs"}]},"references":[{"type":"ARTICLE","url":"https://www.reversinglabs.com/blog/iamreboot-malicious-nuget-packages-exploit-msbuild-loophole"}],"affected":[{"package":{"name":"CData.Salesforce.Net.Framework","ecosystem":"NuGet","purl":"pkg:nuget/CData.Salesforce.Net.Framework"},"versions":["23.0.8669","23.0.8671","23.0.8670"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/nuget/cdata.salesforce.net.framework/MAL-2024-4437.json"}}],"schema_version":"1.7.3","credits":[{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}