{"id":"GHSA-5grr-72f9-678v","aliases":[],"status":"published","title":"Malware package cipherbcrypt","description":"Malicious package. Exfiltrated secrets to a target server.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2024-07-12T21:01:13Z","modified":"2024-07-12T21:01:14Z","affected":[{"source":"ghsa","ecosystem":"PyPI","package":"cipherbcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]},{"source":"osv","ecosystem":"PyPI","package":"cipherbcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]}],"references":[{"url":"https://github.com/pypa/advisory-database/commit/f8df7b7d0444991716fb449d55adf50067d0ba38","tags":["web"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/cipherbcrypt/PYSEC-2024-55.yaml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-5grr-72f9-678v"}],"sources":{"ghsa":[{"id":"GHSA-5grr-72f9-678v","title":"Malware package cipherbcrypt","description":"Malicious package. Exfiltrated secrets to a target server.","status":"published","published":"2024-07-12T21:01:13Z","modified":"2024-07-12T21:01:14Z","updated_at":"2026-11-02T14:37:56.530214Z"}],"osv":[{"id":"GHSA-5grr-72f9-678v","title":"Malware package cipherbcrypt","description":"Malicious package. Exfiltrated secrets to a target server.","status":"published","published":"2024-07-12T21:01:13Z","modified":"2024-07-12T21:01:13Z","updated_at":"2026-11-02T15:46:38.213481Z"}]}}