lwplugin

{"modified":"2025-12-11T09:27:53Z","published":"2024-10-14T18:04:56Z","schema_version":"1.7.4","id":"MAL-2024-12301","summary":"Malicious code in lwplugin (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (c6d463791b2f4dc4cdb8a0b3961dbb9b956fc3f0e0ad974fc407211ae9d2e3a8)\nThe attached DLL is infected with a very high detection rate\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2024-10-old-lwplugin\n\n\nReasons (based on the campaign):\n\n\n - other\n","affected":[{"package":{"ecosystem":"PyPI","name":"lwplugin"},"versions":["0.0.5"]}],"references":[{"type":"EVIDENCE","url":"https://www.virustotal.com/gui/file/6ac5a03985a9305a5660c5823e221e40736427851ce9d99c57fb346a00d44322/detection"},{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/lwplugin"}],"credits":[{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"]},{"name":"Kamil Mańkowski (kam193)","type":"REPORTER","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"]}],"database_specific":{"malicious-packages-origins":[{"source":"kam193","sha256":"b3dc7e66e833135fe0bc581d2880bb8347f1334d9d62fb9a064118c8bf5e40a4","import_time":"2025-12-02T22:30:55.318823472Z","id":"pypi/2024-10-old-lwplugin/lwplugin","modified_time":"2024-10-14T18:04:56Z","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]},{"source":"kam193","sha256":"c6d463791b2f4dc4cdb8a0b3961dbb9b956fc3f0e0ad974fc407211ae9d2e3a8","import_time":"2025-12-02T23:07:18.345623322Z","id":"pypi/2024-10-old-lwplugin/lwplugin","modified_time":"2024-10-14T18:04:56Z","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]},{"source":"kam193","sha256":"e8fce70e75b5d8eeba8e1236a86625fbd9df074545d305d2122549a4b3c7faf5","import_time":"2025-12-10T21:38:57.578977612Z","id":"pypi/2024-10-old-lwplugin/lwplugin","modified_time":"2024-10-14T18:04:56Z","versions":["0.0.5"]}]}}