MAL-2024-5846

    Dashboard / Malicious Package / MAL-2024-5846

    MAL-2024-5846

    Published: 25 Jun 2024Last Modified: 24 Oct 2024Aliases: 
    SNYK-PYTHON-QUANTIUMBASE-5820012

    Summary: Malicious code in quantiumbase (PyPI)

    References: https://blog.sonatype.com/malicious-pypi-package-vmconnect-imitates-vmware-vsphere-connector-module, https://www.reversinglabs.com/blog/vmconnect-malicious-pypi-packages-imitate-popular-open-source-modules, https://security.snyk.io/vuln/SNYK-PYTHON-QUANTIUMBASE-5820012

    Affected packages

    Package

    Name: quantiumbase

    Purl: pkg:pypi/quantiumbase

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    0.8.1
    MAL-2024-5846 | CVE-DB