{"id":"MAL-2024-5061","summary":"Malicious code in discord-dev (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","modified":"2024-10-24T01:01:58Z","published":"2024-06-25T13:34:47Z","database_specific":{"malicious-packages-origins":[{"sha256":"fe80d11c1d712dbd7ecb6405d78d7496da78af06151671c42058e69ad5a643ee","source":"reversing-labs","versions":["3.0","2.9","2.8"],"id":"RLMA-2024-03841","import_time":"2024-06-28T02:48:49.623611146Z","modified_time":"2024-06-25T13:34:47Z"},{"id":"RLUA-2024-08138","import_time":"2024-10-24T00:59:06.814103605Z","modified_time":"2024-10-16T14:39:43Z","sha256":"5b2c02ecca8ca7aa69790466c487b37f7cca660a4df3d727a3c0cb2caf786b65","source":"reversing-labs"}]},"references":[{"type":"ARTICLE","url":"https://blog.phylum.io/a-deep-dive-into-powerat-a-newly-discovered-stealer-rat-combo-polluting-pypi/"},{"type":"ADVISORY","url":"https://research.jfrog.com/malicious-packages/"},{"type":"ARTICLE","url":"https://www.bleepingcomputer.com/news/security/malicious-pypi-packages-create-cloudflare-tunnels-to-bypass-firewalls/"}],"affected":[{"package":{"name":"discord-dev","ecosystem":"PyPI","purl":"pkg:pypi/discord-dev"},"versions":["3.0","2.9","2.8"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/discord-dev/MAL-2024-5061.json"}}],"schema_version":"1.7.3","credits":[{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}