Lucene search
+L

3 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2023/05/14 5:20 a.m.9 views

Malicious code in gkjzjh146 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e2431c5b39467f95f9010ec4bdf29d10e4590cef754a0b41b3057c8a30551fe5 The OpenSSF Package Analysis project identified 'gkjzjh146' @ 1.3 pypi as malicious. It is considered malicious because: - The package executes...

7.2AI score
SaveExploits0
OSV
OSV
added 2023/05/14 5:20 a.m.9 views

MAL-2023-1365 Malicious code in gkjzjh146 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e2431c5b39467f95f9010ec4bdf29d10e4590cef754a0b41b3057c8a30551fe5 The OpenSSF Package Analysis project identified 'gkjzjh146' @ 1.3 pypi as malicious. It is considered malicious because: - The package executes...

7.4AI score
SaveExploits0
Snyk
Snyk
added 2022/09/28 8:12 a.m.1 views

Malicious Package

Overview gkjzjh146 is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

9.8CVSS7.1AI score
SaveExploits0References3
Rows per page
Query Builder