{"id":"MAL-2025-2621","summary":"Malicious code in bsb-backup (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: oracle-using-macaron (7c8850cc513318b8ede38268eed0fee01ba44c81087cd289294b63bada9f394c)\nThis package decodes and executes a script during installation to set up a Telegram bot for device event monitoring. However, the code is obfuscated, making it difficult to comprehend and obscuring its true intent.\n","modified":"2025-04-28T05:47:10Z","published":"2025-03-24T10:27:00Z","database_specific":{"malicious-packages-origins":[{"import_time":"2025-03-24T10:27:00Z","modified_time":"2025-03-24T10:27:00Z","sha256":"7c8850cc513318b8ede38268eed0fee01ba44c81087cd289294b63bada9f394c","source":"oracle-using-macaron","versions":["2.0"]},{"id":"RLMA-2025-02498","import_time":"2025-04-25T09:36:45.481404319Z","modified_time":"2025-04-23T16:06:17Z","sha256":"02325d241c76cd09e37361886070bfcc0dde28364f6ec0066bf9d30e41342662","source":"reversing-labs","versions":["2.0"]}]},"affected":[{"package":{"name":"bsb-backup","ecosystem":"PyPI","purl":"pkg:pypi/bsb-backup"},"versions":["2.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/bsb-backup/MAL-2025-2621.json"}}],"schema_version":"1.7.3","credits":[{"name":"Oracle using Macaron","contact":["https://github.com/oracle/macaron"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}