pypi · Malicious package advisory
Malwaretestjsonn2
MAL-2024-7840
Malicious code in testjsonn2 (PyPI)
Details
--- _-= Per source details. Do not edit below this line.=-_ ## Source: kam193 (0d75d52ae07c9c9e2e6b773f2806c66631dd764da793bac0559e65bc4d0e7f66) --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-ronnyfredd-exfiltr-clipboard Reasons (based on the campaign): - peristence-autorun - clipboard-stealing - ## Source: ossf-package-analysis (5805b7fd85e9ce8cc9ba939125ed7edb16256af6a67d1666522b4b764c281b11) The OpenSSF Package Analysis project identified 'testjsonn2' @ 0.1 (pypi) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.
Compromised versions (1)
- 0.1
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.