{"id":"MAL-2024-4919","summary":"Malicious code in colorahma (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","aliases":["SNYK-PYTHON-COLORAHMA-6513701"],"modified":"2024-10-24T01:01:58Z","published":"2024-06-25T13:33:37Z","database_specific":{"malicious-packages-origins":[{"versions":["1.0.0"],"source":"reversing-labs","sha256":"9d2417c76a69d3db0566f0c746db2f5b93a1a9c070de5ccfda8343aade3a0508","import_time":"2024-06-28T02:48:33.423805689Z","id":"RLMA-2024-03699","modified_time":"2024-06-25T13:33:37Z"},{"source":"reversing-labs","sha256":"acd9ec7cf6b9a435de94f7c2df2d62f6b11b0745abfb253ab52819a63410f32a","import_time":"2024-10-24T00:58:56.537492161Z","id":"RLUA-2024-07990","modified_time":"2024-10-16T14:38:10Z"}]},"references":[{"type":"ARTICLE","url":"https://medium.com/checkmarx-security/pypi-is-under-attack-project-creation-and-user-registration-suspended-heres-the-details-c3b6291d4579"},{"type":"ADVISORY","url":"https://security.snyk.io/vuln/SNYK-PYTHON-COLORAHMA-6513701"}],"affected":[{"package":{"name":"colorahma","ecosystem":"PyPI","purl":"pkg:pypi/colorahma"},"versions":["1.0.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/colorahma/MAL-2024-4919.json"}}],"schema_version":"1.9.0","credits":[{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}