{"id":"MAL-2024-5712","summary":"Malicious code in pyfontslib (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","aliases":["SNYK-PYTHON-PYFONTSLIB-5932192"],"modified":"2024-10-24T01:01:59Z","published":"2024-06-25T13:40:04Z","database_specific":{"malicious-packages-origins":[{"versions":["1.0.0"],"id":"RLMA-2024-04496","import_time":"2024-06-28T02:50:07.233678731Z","modified_time":"2024-06-25T13:40:04Z","sha256":"a6c87fdd8d88e55381a8e9b8241ac89c6139d29228c51a7060c8e995027984ec","source":"reversing-labs"},{"sha256":"08cf45d610eac3fe51343f6565958a0cd27334352bd20aded102e4a13b542fd9","source":"reversing-labs","id":"RLUA-2024-08934","import_time":"2024-10-24T00:59:51.506676081Z","modified_time":"2024-10-16T14:47:59Z"}]},"references":[{"type":"ARTICLE","url":"https://blog.virustotal.com/2023/06/inside-of-wasps-nest-deep-dive-into.html"},{"type":"ARTICLE","url":"https://medium.com/checkmarx-security/the-evolutionary-tale-of-a-persistent-python-threat-d19196d4ed15"},{"type":"ADVISORY","url":"https://security.snyk.io/vuln/SNYK-PYTHON-PYFONTSLIB-5932192"},{"type":"ADVISORY","url":"https://research.jfrog.com/malicious-packages/"}],"affected":[{"package":{"name":"pyfontslib","ecosystem":"PyPI","purl":"pkg:pypi/pyfontslib"},"versions":["1.0.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/pyfontslib/MAL-2024-5712.json"}}],"schema_version":"1.7.3","credits":[{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}