MAL-2024-5103

    Dashboard / Malicious Package / MAL-2024-5103

    MAL-2024-5103

    Published: 25 Jun 2024Last Modified: 24 Oct 2024Aliases: 
    SNYK-PYTHON-EASYTIMESTAMP-3262851

    Summary: Malicious code in easytimestamp (PyPI)

    References: https://blog.phylum.io/a-deep-dive-into-powerat-a-newly-discovered-stealer-rat-combo-polluting-pypi/, https://security.snyk.io/vuln/SNYK-PYTHON-EASYTIMESTAMP-3262851, https://www.bleepingcomputer.com/news/security/malicious-pypi-packages-create-cloudflare-tunnels-to-bypass-firewalls

    Affected packages

    Package

    Name: easytimestamp

    Purl: pkg:pypi/easytimestamp

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    2.8
    MAL-2024-5103 | CVE-DB