asn1tool @0.167.1
Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 12:32 PM UTC
OSV ID
MAL-2024-11530
Ecosystem
pypi
Summary
Package clones a legitimate package. In the call to check the current version, the obfuscated remote code is downloaded and executed. It appears to be an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-11-asn1tool Reasons (based on the campaign): - obfuscation - dependency-confusion - typosquatting - clones-real-package - infostealer
Source: kam193 (2f9270a5372d17332c32e8824c44dab167a1f2a78ebc5a204e090ac4487a0f31)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.