MAL-2024-5479

    Dashboard / Malicious Package / MAL-2024-5479

    MAL-2024-5479

    Published: 25 Jun 2024Last Modified: 19 Mar 2026Aliases: 
    SNYK-PYTHON-PINGDOMV3-7911575

    Summary: Malicious code in pingdomv3 (PyPI)

    Details: Source: kam193 (7b1fe453efd67c0475761e84e07029086b389cedfb367f38826c0d3339b62b01) Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-04-pingdomv3 Reasons (based on the campaign): - reuse-removed-name - obfuscation

    References: https://thehackernews.com/2024/09/hackers-hijack-22000-removed-pypi.html, https://security.snyk.io/vuln/SNYK-PYTHON-PINGDOMV3-7911575, https://jfrog.com/blog/revival-hijack-pypi-hijack-technique-exploited-22k-packages-at-risk/#real-world-revival-hijack-pingdomv3, https://bad-packages.kam193.eu/pypi/package/pingdomv3, https://jfrog.com/blog/revival-hijack-pypi-hijack-technique-exploited-22k-packages-at-risk/#real-world-revival-hijack-pingdomv3

    Affected packages

    Package

    Name: pingdomv3

    Purl: pkg:pypi/pingdomv3

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.1.0
    MAL-2024-5479 | CVE-DB