Lucene search

K
osvGoogleOSV:MAL-2024-1333
HistoryMay 05, 2024 - 7:10 p.m.

Malicious code in threadxpools (PyPI)

2024-05-0519:10:54
Google
osv.dev
1
malicious activity
openssf package analysis
pypi

7.1 High

AI Score

Confidence

High


-= Per source details. Do not edit below this line.=-

Source: ossf-package-analysis (41a0be6e9aa8db3965bae9f646d47ad6cb85ac9600c8bd71358409062b8fe105)

The OpenSSF Package Analysis project identified ‘threadxpools’ @ 1.2 (pypi) as malicious.

It is considered malicious because:

  • The package communicates with a domain associated with malicious activity.
CPENameOperatorVersion
threadxpoolseq1.0
threadxpoolseq1.2

7.1 High

AI Score

Confidence

High