{"id":"MAL-2024-4531","summary":"Malicious code in Lib.Harmony.net (NuGet)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","modified":"2024-10-24T01:01:57Z","published":"2024-06-25T13:29:46Z","database_specific":{"malicious-packages-origins":[{"id":"RLMA-2024-03316","import_time":"2024-06-28T02:47:48.912136281Z","modified_time":"2024-06-25T13:29:46Z","sha256":"cd3e132114697642eccd449382d9eddaa0c9b40210f6d6d06a9477a73ab3edbd","source":"reversing-labs","versions":["7.5.3","4.8.6","7.6.6","1.3.3","1.1.7","4.5.1","5.5.9","1.3.1","1.8.9","8.5.7"]},{"import_time":"2024-10-24T00:58:38.12268598Z","modified_time":"2024-10-16T13:47:57Z","sha256":"2bbbe1b76d7216c033173c7d9554944608e9c2cc461963b42ec3f8d843926040","source":"reversing-labs","id":"RLUA-2024-07676"}]},"references":[{"type":"ARTICLE","url":"https://www.reversinglabs.com/blog/malicious-nuget-campaign-uses-homoglyphs-and-il-weaving-to-fool-devs"}],"affected":[{"package":{"name":"Lib.Harmony.net","ecosystem":"NuGet","purl":"pkg:nuget/Lib.Harmony.net"},"versions":["7.5.3","4.8.6","7.6.6","1.3.3","1.1.7","4.5.1","5.5.9","1.3.1","1.8.9","8.5.7"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/nuget/lib.harmony.net/MAL-2024-4531.json"}}],"schema_version":"1.7.3","credits":[{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}