aiocpa

{"modified":"2025-12-24T10:09:32Z","published":"2024-12-09T06:49:42Z","schema_version":"1.7.4","id":"MAL-2024-11518","aliases":["SNYK-PYTHON-AIOCPA-8442272"],"summary":"Malicious code in aiocpa (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","affected":[{"package":{"ecosystem":"PyPI","name":"aiocpa","purl":"pkg:pypi/aiocpa"},"versions":["0.1.13","0.1.14"]}],"references":[{"type":"ADVISORY","url":"https://security.snyk.io/vuln/SNYK-PYTHON-AIOCPA-8442272"},{"type":"ARTICLE","url":"https://blog.phylum.io/python-crypto-library-updated-to-steal-private-keys"},{"type":"ARTICLE","url":"https://www.reversinglabs.com/blog/malicious-pypi-crypto-pay-package-aiocpa-implants-infostealer-code"}],"credits":[{"name":"ReversingLabs","type":"FINDER","contact":["https://www.reversinglabs.com"]}],"database_specific":{"malicious-packages-origins":[{"source":"reversing-labs","sha256":"158d78f4b656b14428ccb76d8fa8589f2f815b0b76943230f7ca5049aa4f7816","import_time":"2024-12-09T14:38:40.337865583Z","id":"RLMA-2024-10961","modified_time":"2024-12-09T06:49:42Z","versions":["0.1.13","0.1.14"]},{"source":"reversing-labs","sha256":"9ac16efaabf430d615ac6642aec7c2664ad2739fd11aab83fd63f2ee65f18d5b","import_time":"2025-12-24T10:07:36.370412215Z","id":"RLUA-2025-06548","modified_time":"2025-12-23T08:37:49Z"}]}}