MAL-2023-1370

    Dashboard / Malicious Package / MAL-2023-1370

    MAL-2023-1370

    Published: 20 May 2023Last Modified: 20 May 2023

    Summary: Malicious code in install-crypto (PyPI)

    Details: Source: ossf-package-analysis (6226d5b0f89ec8275730cc47b85f33998f62c7a555a51ae59917a445ffb9e1d1) The OpenSSF Package Analysis project identified 'install-crypto' @ 4.18.5 (pypi) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: install-crypto

    Purl: pkg:pypi/install-crypto

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    4.18.5
    MAL-2023-1370 | CVE-DB