pypi · Malicious package advisory
Malwaretestjsonn1
MAL-2024-7839
Malicious code in testjsonn1 (PyPI)
Details
--- _-= Per source details. Do not edit below this line.=-_ ## Source: kam193 (d8b57f71eadeb645df871ae41a475cb9a8ba647679e7455f66e0c9e9b5627651) --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-ronnyfredd-exfiltr-clipboard Reasons (based on the campaign): - peristence-autorun - clipboard-stealing - ## Source: ossf-package-analysis (2d25fdeb9912953dee8657737ed45cf80388580eb8d6a9ab61a46be72ef1b1a6) The OpenSSF Package Analysis project identified 'testjsonn1' @ 0.6 (pypi) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.
Compromised versions (6)
- 0.6
- 0.7
- 0.1
- 0.2
- 0.3
- 0.4
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.