MAL-2025-2552

    Dashboard / Malicious Package / MAL-2025-2552

    MAL-2025-2552

    Published: 19 Mar 2025Last Modified: 20 Mar 2025

    Summary: Malicious code in io.github.leetcrunch:scribejava-core (Maven)

    Details: Source: google-open-source-security (8dd884cda209e50c2bd5185172f3c25968cb972cbd19234779b43f4f855f2d26) A malicious Maven Java package a typosquatting a legitimate OAuth Maven package. The malicious package collects and exfils OAuth credentials on the 15th day of each month.

    References: https://socket.dev/blog/malicious-maven-package-exfiltrates-oauth-credentials

    Affected packages

    Package

    Name: io.github.leetcrunch:scribejava-core

    Purl: pkg:maven/io.github.leetcrunch/scribejava-core

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    8.3.5
    MAL-2025-2552 | CVE-DB