Lucene search
GoogleOSV:MAL-2023-1412HistoryMay 10, 2023 - 11:43 a.m.
Malicious code in spamsynonym (PyPI)
2023-05-1011:43:49
Google
osv.dev
6
malicious activity
spamsynonym
software
7.1 High
AI Score
Confidence
High
-= Per source details. Do not edit below this line.=-
Source: ossf-package-analysis (bbc650ef44d412610406a674ac1fce3dcb717b01d175614f158016f47b53b1ce)
The OpenSSF Package Analysis project identified ‘spamsynonym’ @ 1.1.1 (pypi) as malicious.
It is considered malicious because:
- The package communicates with a domain associated with malicious activity.
| CPE | Name | Operator | Version |
|---|---|---|---|
| spamsynonym | eq | 1.0.0 | |
| spamsynonym | eq | 1.1.1 |
7.1 High
AI Score
Confidence
High