Encyclopedia
Maven☠ CRITICALtyposquat⚠ ACTIVE THREAT

log4j-overwrite

First seen: May 18, 2024 0 viewsMimics: log4j-core
Share threatHN
Threat Description

Typosquat exploiting the post-Log4Shell confusion around log4j naming. The artifact bundles a JNDI lookup payload that re-introduces the remote code execution vector, allowing attackers to execute arbitrary code via a crafted log message.

AI Hallucination Analysis
Unlikely AI Hallucination14%
Known to be hallucinated by: n/a (typosquat)
Remediation Guide
  1. Remove 'log4j-overwrite' from your pom.xml immediately.
  2. Replace with the legitimate 'log4j-core' (patched 2.17.1+).
  3. Audit for JNDI lookup usage and active RCE exploitation.
  4. Rotate any credentials on affected hosts.
Quick Facts
Ecosystem
Maven
Risk Level
CRITICAL
Type
typosquat
Status
ACTIVE
Legitimate Package
log4j-core
Hallucination Confidence
14%
Check My Project
Scan for this package