{"id":"MAL-2024-4539","summary":"Malicious code in Mail (NuGet)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","modified":"2024-10-24T01:01:57Z","published":"2024-06-25T13:30:01Z","database_specific":{"malicious-packages-origins":[{"id":"RLMA-2024-03333","import_time":"2024-06-28T02:47:51.261481622Z","modified_time":"2024-06-25T13:30:01Z","sha256":"975fdfe7b9667a196d71f2cc49326065064067dd403f27c24a1028f932f107f1","source":"reversing-labs","versions":["1.5.29","1.5.67","1.5.84","1.5.86","1.5.61","1.5.22","1.5.91","2.6.0","1.5.76","1.5.92","1.5.35","1.5.56","1.5.4","1.5.24","1.5.81","1.5.42","1.5.75","1.5.36","1.5.95","1.5.28","1.5.73","1.5.99","1.5.80","1.5.83","1.5.85","1.5.100","1.5.39","1.5.72","1.5.27","1.5.93","1.5.44","1.5.62","1.5.45","1.5.31","1.5.7","1.5.30","1.5.13","1.5.2","1.5.5","1.5.17","1.5.32","1.5.69","1.5.8","1.5.54","1.5.15","1.5.47","1.5.46","1.5.78","1.5.89","1.5.77","1.5.55","1.5.94","1.5.10","1.5.68","1.5.90","1.5.65","1.5.21","1.5.66","1.5.52","1.5.33","1.5.57","1.5.53","1.5.74","1.5.97","1.5.26","2.5.9","1.5.64","1.5.63","1.5.16","1.5.98","1.5.34","1.5.82","1.5.88","1.5.6","1.5.87","1.5.37","1.5.58","1.5.20","1.5.38","1.5.18","2.5.8","1.5.9","1.5.51","1.5.3","1.5.48","1.5.14","1.5.96","1.5.12","1.5.40","1.5.70","1.5.11","1.5.50","1.5.19","1.5.60","1.5.1","1.5.71","1.5.25","1.5.79","1.5.23","1.5.49","1.5.41","1.5.43","1.5.59"]},{"id":"RLUA-2024-07679","import_time":"2024-10-24T00:58:38.311714363Z","modified_time":"2024-10-16T13:47:59Z","sha256":"e490541b57d8a4e04d397a7a4df3bf0d69b6252d5f28981a2600ed6a33794b07","source":"reversing-labs"}]},"references":[{"type":"ARTICLE","url":"https://www.reversinglabs.com/blog/malicious-nuget-campaign-uses-homoglyphs-and-il-weaving-to-fool-devs"}],"affected":[{"package":{"name":"Mail","ecosystem":"NuGet","purl":"pkg:nuget/Mail"},"versions":["1.5.29","1.5.67","1.5.84","1.5.86","1.5.61","1.5.22","1.5.91","2.6.0","1.5.76","1.5.92","1.5.35","1.5.56","1.5.4","1.5.24","1.5.81","1.5.42","1.5.75","1.5.36","1.5.95","1.5.28","1.5.73","1.5.99","1.5.80","1.5.83","1.5.85","1.5.100","1.5.39","1.5.72","1.5.27","1.5.93","1.5.44","1.5.62","1.5.45","1.5.31","1.5.7","1.5.30","1.5.13","1.5.2","1.5.5","1.5.17","1.5.32","1.5.69","1.5.8","1.5.54","1.5.15","1.5.47","1.5.46","1.5.78","1.5.89","1.5.77","1.5.55","1.5.94","1.5.10","1.5.68","1.5.90","1.5.65","1.5.21","1.5.66","1.5.52","1.5.33","1.5.57","1.5.53","1.5.74","1.5.97","1.5.26","2.5.9","1.5.64","1.5.63","1.5.16","1.5.98","1.5.34","1.5.82","1.5.88","1.5.6","1.5.87","1.5.37","1.5.58","1.5.20","1.5.38","1.5.18","2.5.8","1.5.9","1.5.51","1.5.3","1.5.48","1.5.14","1.5.96","1.5.12","1.5.40","1.5.70","1.5.11","1.5.50","1.5.19","1.5.60","1.5.1","1.5.71","1.5.25","1.5.79","1.5.23","1.5.49","1.5.41","1.5.43","1.5.59"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/nuget/mail/MAL-2024-4539.json"}}],"schema_version":"1.7.3","credits":[{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}