{"id":"MAL-2024-6053","summary":"Malicious code in support-hub (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","aliases":["SNYK-PYTHON-SUPPORTHUB-5508584"],"modified":"2024-10-24T01:01:59Z","published":"2024-06-25T13:42:56Z","database_specific":{"malicious-packages-origins":[{"versions":["0.8"],"sha256":"0552a5e8108c0921944f3be3e64cc31f6c431d1c1e6e256fff6098f2ba3c4d40","source":"reversing-labs","modified_time":"2024-06-25T13:42:56Z","id":"RLMA-2024-04856","import_time":"2024-06-28T02:50:50.556260244Z"},{"sha256":"2e9f9b24281f4a3868399466f3cac6f644de14dfca6f397fa5a77f76192c58ac","source":"reversing-labs","modified_time":"2024-10-16T14:51:57Z","id":"RLUA-2024-09324","import_time":"2024-10-24T01:00:14.371585849Z"}]},"references":[{"type":"WEB","url":"https://github.com/DataDog/malicious-software-packages-dataset"},{"type":"ADVISORY","url":"https://security.snyk.io/vuln/SNYK-PYTHON-SUPPORTHUB-5508584"},{"type":"ARTICLE","url":"https://medium.com/checkmarx-security/ml-engine-detects-pypi-packages-containing-whitesnake-malware-designed-to-steal-your-personal-7a275496f442"},{"type":"ADVISORY","url":"https://research.jfrog.com/malicious-packages/"}],"affected":[{"package":{"name":"support-hub","ecosystem":"PyPI","purl":"pkg:pypi/support-hub"},"versions":["0.8"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/support-hub/MAL-2024-6053.json"}}],"schema_version":"1.7.3","credits":[{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}