{"id":"MAL-2024-9981","summary":"Malicious code in etheerum (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (4f116d23a37e9b35737d70caa227a83a67e387de2ff2cccef342c0ad5487fe1f)\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: funcaptcha-ru\n\n\nReasons (based on the campaign):\n\n\n - infostealer\n","modified":"2025-12-12T20:37:00.197575Z","published":"2024-06-28T20:16:20Z","database_specific":{"malicious-packages-origins":[{"versions":["1.0.0"],"sha256":"fe68e67af2da7380d6d901bafcba130a06347b2dc5ce5546a927d011b2c68d3d","id":"RLMA-2024-08205","source":"reversing-labs","import_time":"2024-10-24T00:56:56.285762469Z","modified_time":"2024-10-16T14:40:26Z"},{"sha256":"b8f2e9d64d6209e131e6dbdb1e1df7b2810aa376fb33f88847e4cfc317510c24","id":"pypi/funcaptcha-ru/etheerum","source":"kam193","import_time":"2025-12-02T22:30:55.137090405Z","ranges":[{"events":[{"introduced":"0"}],"type":"ECOSYSTEM"}],"modified_time":"2024-06-28T20:16:20Z"},{"sha256":"4f116d23a37e9b35737d70caa227a83a67e387de2ff2cccef342c0ad5487fe1f","id":"pypi/funcaptcha-ru/etheerum","source":"kam193","import_time":"2025-12-02T23:07:18.14838153Z","ranges":[{"events":[{"introduced":"0"}],"type":"ECOSYSTEM"}],"modified_time":"2024-06-28T20:16:20Z"},{"versions":["1.0.0"],"sha256":"0b27c9b6e6226c5643a99dea346b19e87e20b44ac2a51b37b7e9d98cf7bf045a","id":"pypi/funcaptcha-ru/etheerum","source":"kam193","import_time":"2025-12-10T21:38:57.429908583Z","modified_time":"2024-06-28T20:16:20Z"}]},"references":[{"type":"ARTICLE","url":"https://www.cert.at/en/blog/2024/3/hobby-hunter-notes-pypi-under-attack"},{"type":"WEB","url":"https://blog.phylum.io/typosquatting-campaign-targets-python-developers/"},{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/etheerum"}],"affected":[{"package":{"name":"etheerum","ecosystem":"PyPI","purl":"pkg:pypi/etheerum"},"versions":["1.0.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/etheerum/MAL-2024-9981.json"}}],"schema_version":"1.7.3","credits":[{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"]},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}