{"id":"MAL-2024-5846","summary":"Malicious code in quantiumbase (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","aliases":["SNYK-PYTHON-QUANTIUMBASE-5820012"],"modified":"2024-10-24T01:01:59Z","published":"2024-06-25T13:41:16Z","database_specific":{"malicious-packages-origins":[{"id":"RLMA-2024-04647","import_time":"2024-06-28T02:50:24.881971284Z","modified_time":"2024-06-25T13:41:16Z","sha256":"3dc20df8d211e9a3d5751b014623034b9fcb973f05a1bb337d65d0df8c650901","source":"reversing-labs","versions":["0.8.1","0.7.0"]},{"import_time":"2024-10-24T01:00:00.350383502Z","modified_time":"2024-10-16T14:49:40Z","sha256":"d60913921fc693d5f853a1d30cf2ffb65cd23d20bdcfa3b8d3f84aec87958b39","source":"reversing-labs","id":"RLUA-2024-09101"}]},"references":[{"type":"ARTICLE","url":"https://blog.sonatype.com/malicious-pypi-package-vmconnect-imitates-vmware-vsphere-connector-module"},{"type":"ARTICLE","url":"https://www.reversinglabs.com/blog/vmconnect-malicious-pypi-packages-imitate-popular-open-source-modules"},{"type":"ADVISORY","url":"https://security.snyk.io/vuln/SNYK-PYTHON-QUANTIUMBASE-5820012"}],"affected":[{"package":{"name":"quantiumbase","ecosystem":"PyPI","purl":"pkg:pypi/quantiumbase"},"versions":["0.8.1","0.7.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/quantiumbase/MAL-2024-5846.json"}}],"schema_version":"1.7.3","credits":[{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}