MAL-2023-1389

    Dashboard / Malicious Package / MAL-2023-1389

    MAL-2023-1389

    Published: 20 May 2023Last Modified: 20 May 2023

    Summary: Malicious code in pygame-install (PyPI)

    Details: Source: ossf-package-analysis (93390eea0977ef15ff0c7413e64df5bd99497ea76e9238097ee0b6f4b9862fdd) The OpenSSF Package Analysis project identified 'pygame-install' @ 17.14.20 (pypi) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: pygame-install

    Purl: pkg:pypi/pygame-install

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    17.14.20
    MAL-2023-1389 | CVE-DB