MAL-2024-5077

    Dashboard / Malicious Package / MAL-2024-5077

    MAL-2024-5077

    Published: 25 Jun 2024Last Modified: 24 Oct 2024Aliases: 
    SNYK-PYTHON-DISCORDER-3262852

    Summary: Malicious code in discorder (PyPI)

    References: https://blog.phylum.io/a-deep-dive-into-powerat-a-newly-discovered-stealer-rat-combo-polluting-pypi/, https://security.snyk.io/vuln/SNYK-PYTHON-DISCORDER-3262852, https://www.bleepingcomputer.com/news/security/malicious-pypi-packages-create-cloudflare-tunnels-to-bypass-firewalls, https://research.jfrog.com/malicious-packages/

    Affected packages

    Package

    Name: discorder

    Purl: pkg:pypi/discorder

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    2.8