# sonatype-2024-1783

pytoileur - Sat 25 May 2024 - Malicious Package - "Cool Package" campaign

Published May 27, 2024

[help.sonatype.com](https://help.sonatype.com/en/sonatype-malware-data.html)  [OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8565.json)  [OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8566.json)  [OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8567.json)  [OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8569.json)  [OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8570.json)  [OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8572.json)  [OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8573.json)  [OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8574.json)  [OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8576.json)  [OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8577.json)  [OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8578.json)  [OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8579.json)  [OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8580.json)  [OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8581.json)  [OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8582.json)  [OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8583.json)  [OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8584.json)  [OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8585.json)  [OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8586.json)  [OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8587.json)  [OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8588.json)  [OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8590.json)  [OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8591.json)  [OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2024-10124.json)  [OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2024-10141.json)  [OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2024-10147.json)  [OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2024-5187.json)  [OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2024-5646.json)  [sonatype.com](/content/blog/pypi-crypto-stealer-targets-windows-users-revives-malware-campaign/index.html)

CVSS ScoreCritical

10.0

Security Details

### sonatype-2024-1783 Security Details

CVE IDsonatype-2024-1783

CWEN/A

CVE Descriptionpytoileur - Sat 25 May 2024 - Malicious Package - "Cool Package" campaign

PublishedMay 27, 2024

CVSS Score & Severity

10.0Critical

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS Score0%

Malware

malware

KEV Status

Not in KEV Catalog: No known exploits

Affected Ecosystems

affected

SourceSonatype

References

[help.sonatype.com](https://help.sonatype.com/en/sonatype-malware-data.html "https://help.sonatype.com/en/sonatype-malware-data.html")  THIRD\_PARTY

[OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8565.json "https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8565.json")  THIRD\_PARTY

[OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8566.json "https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8566.json")  THIRD\_PARTY

[OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8567.json "https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8567.json")  THIRD\_PARTY

[OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8569.json "https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8569.json")  THIRD\_PARTY

[OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8570.json "https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8570.json")  THIRD\_PARTY

[OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8572.json "https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8572.json")  THIRD\_PARTY

[OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8573.json "https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8573.json")  THIRD\_PARTY

[OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8574.json "https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8574.json")  THIRD\_PARTY

[OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8576.json "https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8576.json")  THIRD\_PARTY

[OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8577.json "https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8577.json")  THIRD\_PARTY

[OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8578.json "https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8578.json")  THIRD\_PARTY

[OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8579.json "https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8579.json")  THIRD\_PARTY

[OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8580.json "https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8580.json")  THIRD\_PARTY

[OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8581.json "https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8581.json")  THIRD\_PARTY

[OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8582.json "https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8582.json")  THIRD\_PARTY

[OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8583.json "https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8583.json")  THIRD\_PARTY

[OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8584.json "https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8584.json")  THIRD\_PARTY

[OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8585.json "https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8585.json")  THIRD\_PARTY

[OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8586.json "https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8586.json")  THIRD\_PARTY

[OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8587.json "https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8587.json")  THIRD\_PARTY

[OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8588.json "https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8588.json")  THIRD\_PARTY

[OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8590.json "https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8590.json")  THIRD\_PARTY

[OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8591.json "https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2023-8591.json")  THIRD\_PARTY

[OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2024-10124.json "https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2024-10124.json")  THIRD\_PARTY

[OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2024-10141.json "https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2024-10141.json")  THIRD\_PARTY

[OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2024-10147.json "https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2024-10147.json")  THIRD\_PARTY

[OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2024-5187.json "https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2024-5187.json")  THIRD\_PARTY

[OSV](https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2024-5646.json "https://osv-vulnerabilities.storage.googleapis.com/PyPI/MAL-2024-5646.json")  THIRD\_PARTY