OSV ID
MAL-2024-12342
Ecosystem
pypi
Summary
The package contains highly obfuscated content, that install another, downloaded from a remote location obfuscated script in the installation path of the 'requests' package, and marks it as a hidden system file. In addition, another file contains a code that imitates doing some meaningful activity. Later attempts hide the malicious code in a separated package, downloaded from Test PyPI. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-12-httpfluent Reasons (based on the campaign): - obfuscation - modify-system-without-consent - Downloads and executes a remote malicious script.
Source: kam193 (601385385b682f6bdaa31c763e64c5fafb16f22df60acd266c9c7f23f73208ee)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.