MAL-2024-10573

    Dashboard / Malicious Package / MAL-2024-10573

    MAL-2024-10573

    Published: 11 Nov 2024Last Modified: 11 Nov 2024

    Summary: Malicious code in fabrice (PyPI)

    Details: Source: google-open-source-security (d1d6b36980b1999e5525b7490b4a430c21cb4f86493a11b76f34ae8c02bfc19c) The PyPI package fabrice is a malicious package typosquatting the legitimate package fabric. The package is an info stealer primarily focused on stealing AWS credentials.

    References: https://socket.dev/blog/malicious-python-package-typosquats-fabric-ssh-library

    Affected packages

    Package

    Name: fabrice

    Purl: pkg:pypi/fabrice

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    MAL-2024-10573 | CVE-DB