MAL-2024-5769

    Dashboard / Malicious Package / MAL-2024-5769

    MAL-2024-5769

    Published: 25 Jun 2024Last Modified: 24 Oct 2024Aliases: 
    SNYK-PYTHON-PYROLOGIN-3262854

    Summary: Malicious code in pyrologin (PyPI)

    References: https://blog.phylum.io/a-deep-dive-into-powerat-a-newly-discovered-stealer-rat-combo-polluting-pypi/, https://github.com/DataDog/malicious-software-packages-dataset, https://security.snyk.io/vuln/SNYK-PYTHON-PYROLOGIN-3262854, https://www.bleepingcomputer.com/news/security/malicious-pypi-packages-create-cloudflare-tunnels-to-bypass-firewalls, https://research.jfrog.com/malicious-packages/

    Affected packages

    Package

    Name: pyrologin

    Purl: pkg:pypi/pyrologin

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    2.6
    MAL-2024-5769 | CVE-DB