{"id":"MAL-2024-4572","summary":"Malicious code in NotifyIcons (NuGet)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","modified":"2024-10-24T01:01:57Z","published":"2024-06-25T13:30:22Z","database_specific":{"malicious-packages-origins":[{"sha256":"5f1c8569d5c27a4f39dab41c70a081678ea80e0a000b90c742b7a5cd9d4604ae","modified_time":"2024-06-25T13:30:22Z","import_time":"2024-06-28T02:47:54.977774828Z","source":"reversing-labs","versions":["1.2.51","1.2.57","1.2.68","1.2.117","1.2.33","4.6.4","1.2.120","1.2.79","1.2.61","1.2.116","1.2.108","1.2.69","1.2.94","1.2.104","1.2.106","1.2.81","1.2.6","1.2.13","1.2.48","1.2.7","1.2.41","1.2.119","1.2.19","1.2.27","1.2.31","1.2.12","1.2.10","1.2.89","1.2.92","1.2.118","1.2.82","1.2.121","1.2.63","1.2.9","1.2.98","1.2.113","1.2.38","1.2.102","1.2.65","1.2.78","1.2.83","1.2.88","1.2.74","1.2.11","1.2.4","1.2.37","1.2.101","1.2.96","1.2.22","1.2.44","1.2.35","1.2.20","1.2.66","1.2.112","1.2.75","1.2.67","1.2.29","1.2.100","1.2.16","1.2.40","1.2.107","1.2.71","1.2.53","1.2.5","1.2.26","1.2.105","1.2.54","1.2.62","1.2.90","1.2.34","1.2.28","1.2.58","1.2.97","1.2.84","1.2.36","1.2.111","1.2.103","1.2.43","1.2.73","1.2.95","1.2.49","1.2.23","1.2.85","1.2.56","1.2.24","1.2.30","1.2.42","1.2.80","1.2.64","1.2.76","1.2.21","4.6.5","1.2.86","1.2.59","1.2.39","1.2.52","1.2.25","1.2.115","1.2.99","1.2.110","1.2.18","1.2.114","1.2.91","1.2.8","1.2.32","1.2.109","1.2.46","1.2.17","1.2.72","1.2.15","1.2.3","1.2.77","4.6.3","1.2.87","1.2.93","1.2.45","1.2.55","1.2.60","1.2.50","1.2.47","1.2.70","1.2.2","1.2.14"],"id":"RLMA-2024-03364"},{"sha256":"50fd824f6c6f06a9e0445181e5a920e586613719455d556ca4d44785d942a05a","modified_time":"2024-10-16T13:48:03Z","import_time":"2024-10-24T00:58:38.803579229Z","source":"reversing-labs","id":"RLUA-2024-07686"}]},"references":[{"type":"ARTICLE","url":"https://www.reversinglabs.com/blog/malicious-nuget-campaign-uses-homoglyphs-and-il-weaving-to-fool-devs"}],"affected":[{"package":{"name":"NotifyIcons","ecosystem":"NuGet","purl":"pkg:nuget/NotifyIcons"},"versions":["1.2.51","1.2.57","1.2.68","1.2.117","1.2.33","4.6.4","1.2.120","1.2.79","1.2.61","1.2.116","1.2.108","1.2.69","1.2.94","1.2.104","1.2.106","1.2.81","1.2.6","1.2.13","1.2.48","1.2.7","1.2.41","1.2.119","1.2.19","1.2.27","1.2.31","1.2.12","1.2.10","1.2.89","1.2.92","1.2.118","1.2.82","1.2.121","1.2.63","1.2.9","1.2.98","1.2.113","1.2.38","1.2.102","1.2.65","1.2.78","1.2.83","1.2.88","1.2.74","1.2.11","1.2.4","1.2.37","1.2.101","1.2.96","1.2.22","1.2.44","1.2.35","1.2.20","1.2.66","1.2.112","1.2.75","1.2.67","1.2.29","1.2.100","1.2.16","1.2.40","1.2.107","1.2.71","1.2.53","1.2.5","1.2.26","1.2.105","1.2.54","1.2.62","1.2.90","1.2.34","1.2.28","1.2.58","1.2.97","1.2.84","1.2.36","1.2.111","1.2.103","1.2.43","1.2.73","1.2.95","1.2.49","1.2.23","1.2.85","1.2.56","1.2.24","1.2.30","1.2.42","1.2.80","1.2.64","1.2.76","1.2.21","4.6.5","1.2.86","1.2.59","1.2.39","1.2.52","1.2.25","1.2.115","1.2.99","1.2.110","1.2.18","1.2.114","1.2.91","1.2.8","1.2.32","1.2.109","1.2.46","1.2.17","1.2.72","1.2.15","1.2.3","1.2.77","4.6.3","1.2.87","1.2.93","1.2.45","1.2.55","1.2.60","1.2.50","1.2.47","1.2.70","1.2.2","1.2.14"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/nuget/notifyicons/MAL-2024-4572.json"}}],"schema_version":"1.7.3","credits":[{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}