MAL-2024-11530

    Dashboard / Malicious Package / MAL-2024-11530

    MAL-2024-11530

    Published: 10 Nov 2024Last Modified: 19 Mar 2026

    Summary: Malicious code in asn1tool (PyPI)

    Details: Source: kam193 (2f9270a5372d17332c32e8824c44dab167a1f2a78ebc5a204e090ac4487a0f31) Package clones a legitimate package. In the call to check the current version, the obfuscated remote code is downloaded and executed. It appears to be an infostealer Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-11-asn1tool Reasons (based on the campaign): - obfuscation - dependency-confusion - typosquatting - clones-real-package - infostealer

    References: https://bad-packages.kam193.eu/pypi/package/asn1tool

    Affected packages

    Package

    Name: asn1tool

    Purl: pkg:pypi/asn1tool

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    0.167.0
    0.167.1