MAL-2022-7424

    Dashboard / Malicious Package / MAL-2022-7424

    MAL-2022-7424

    Published: 30 Aug 2022Last Modified: 8 Nov 2023Aliases: 
    GHSA-rqcv-3wp9-w2r3

    Summary: Malicious code in free-net-vpn2 (PyPI)

    Details: Source: ghsa-malware (918a0f985a93815d37d9480f97dd5203b78834142904ae50550bd431ca52c05b) Security researchers at Check Point Research discovered a malicious package called `free-net-vpn2` that targets environment variables. PyPI has since removed `free-net-vpn2`.

    References: https://pypi.org/project/free-net-vpn2, https://research.checkpoint.com/2022/cloudguard-spectral-detects-several-malicious-packages-on-pypi-the-official-software-repository-for-python-developers/, https://github.com/advisories/GHSA-rqcv-3wp9-w2r3

    Affected packages

    Package

    Name: free-net-vpn2

    Purl: pkg:pypi/free-net-vpn2

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    MAL-2022-7424 | CVE-DB