dbgpkg

{"modified":"2025-12-24T10:09:32Z","published":"2025-06-18T10:15:07Z","schema_version":"1.7.4","id":"MAL-2025-5109","summary":"Malicious code in dbgpkg (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","affected":[{"package":{"ecosystem":"PyPI","name":"dbgpkg","purl":"pkg:pypi/dbgpkg"},"versions":["1.3.6","1.3.7","1.3.8"]}],"references":[{"type":"ARTICLE","url":"https://www.reversinglabs.com/blog/backdoor-implant-discovered-on-pypi-posing-as-debugging-utility"}],"credits":[{"name":"ReversingLabs","type":"FINDER","contact":["https://www.reversinglabs.com"]}],"database_specific":{"malicious-packages-origins":[{"source":"reversing-labs","sha256":"ad7fc7c34738ac07da72b31e5d8da1330359abd80e4c40ff82b91e7893d424c5","import_time":"2025-06-18T15:06:00.659172012Z","id":"RLMA-2025-03006","modified_time":"2025-06-18T10:15:07Z","versions":["1.3.6","1.3.7","1.3.8"]},{"source":"reversing-labs","sha256":"6f67ae6d5301f7790bed5a84f43fe59211c31d52b053dec034acb1339834d8d4","import_time":"2025-12-24T10:07:36.477023671Z","id":"RLUA-2025-06559","modified_time":"2025-12-23T08:38:20Z"}]}}