{"id":"MAL-2024-4609","summary":"Malicious code in Pathoschild.Stardew.ModBuildConfig.Net (NuGet)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","modified":"2024-10-24T01:01:57Z","published":"2024-06-25T13:30:46Z","database_specific":{"malicious-packages-origins":[{"import_time":"2024-06-28T02:47:58.866847948Z","modified_time":"2024-06-25T13:30:46Z","sha256":"ad53e98344c4105a5dfcb9039f324ec6ba74a206170f92f441dbd14563eb5eac","source":"reversing-labs","versions":["2.1.9","5.1.3","4.8.8","6.4.8","9.6.9","4.4.8","1.4.7","1.5.6","6.2.6","9.2.9"],"id":"RLMA-2024-03397"},{"source":"reversing-labs","id":"RLUA-2024-07712","import_time":"2024-10-24T00:58:40.561017246Z","modified_time":"2024-10-16T13:48:20Z","sha256":"810becaf633b0b2efd4d104f8872d107a8f11d3c24be7bbae78f11af9619cc74"}]},"references":[{"type":"ARTICLE","url":"https://www.reversinglabs.com/blog/malicious-nuget-campaign-uses-homoglyphs-and-il-weaving-to-fool-devs"}],"affected":[{"package":{"name":"Pathoschild.Stardew.ModBuildConfig.Net","ecosystem":"NuGet","purl":"pkg:nuget/Pathoschild.Stardew.ModBuildConfig.Net"},"versions":["2.1.9","5.1.3","4.8.8","6.4.8","9.6.9","4.4.8","1.4.7","1.5.6","6.2.6","9.2.9"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/nuget/pathoschild.stardew.modbuildconfig.net/MAL-2024-4609.json"}}],"schema_version":"1.7.3","credits":[{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}