vuln-osv update 2026-11-12T06:43:41Z
This commit is contained in:
Vulnerability Bot
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
@@ -1 +1 @@
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-18435","published":"2026-11-01T08:01:23Z","modified":"2026-11-01T09:45:03.305960502Z","summary":"Malicious code in privacypass-py (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (0ca6e88317dac5ec524d2dc6ec4b2af7934e2213569ed7c8a757e59edb45b0c3)\nThe package presents itself as 'Privacy Pass client primitives' but ships no cryptographic functionality. Its only runtime effect is a data-exfiltration beacon. setup.py invokes a `_report()` routine during build/install that collects hostname, username, current working directory, argv, the parent process command line read from /proc/<ppid>/cmdline, and environment variable names and values matching credential-related prefixes (AWS_, GITHUB_, PIP_, and others), then POSTs the JSON payload to the hardcoded bare-IP endpoint http://85.190.112.236:8881/b/<nonce> over plain HTTP. privacypass_py/__init__.py repeats the same beacon at module top level, calling `_report('import')` on every `import privacypass_py` with an expanded prefix list (CLOUDFLARE_, SUPERTOKENS, HOME, USER, PATH) and an additional `secretish_names` list filtered by substrings KEY/SECRET/TOKEN/PASS/CRED/PRIVATE/SEED/MNEMONIC/SIGNATURE/COOKIE/SESSION/AUTH, sent to http://85.190.112.236:8881/f/<nonce>. The import-time path fires outside pip build isolation. The name and description function as cover for a package whose only shipped code is the beacon.\n\n## Source: kam193 (1c4699b191565636c74fc5e6e8ece237bb0186ca11f021298ac91b2931756c09)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n","affected":[{"package":{"name":"privacypass-py","ecosystem":"PyPI","purl":"pkg:pypi/privacypass-py"},"versions":["0.1.101","0.1.99","0.1.100"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"setup.py","sha256":"cea0614f670c026bcdd5bc600a13e5463c28d46412c242cd38739bcfee596810","tlsh":"9f415490ef227c7282d605096828459473bab90f2aa17474f6de23752f9e03982f3e56"},{"path":"privacypass_py/__init__.py","sha256":"4862a75e16b2e466f28ba5d71ee6097729502ac5e9294ebbdd0f069004ff5c96","tlsh":"f7515290ed229d33c29f411e2c1448e0333af40f36556535bacd2678af9d02d52f2d9a"}],"package_integrity":[{"filename":"privacypass_py-0.1.101.tar.gz","hashes":{"blake2b_256":"29851396f302ddcb3f730480a1de58a24b39982843a6aed068c33011cd3fd35e","md5":"e6c7c197293a5ae366da64052d704a35","sha256":"2427b1b03b2bdb8deab5d0d3d56273e462c59ff0d64f3134ff128745d69ecff3"}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/privacypass-py/MAL-2026-18435.json"}}],"references":[{"type":"PACKAGE","url":"https://pypi.org/project/privacypass-py/0.1.101/"},{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/privacypass-py"}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-022471","import_time":"2026-11-01T08:14:47.241746113Z","modified_time":"2026-11-01T08:01:23Z","sha256":"0ca6e88317dac5ec524d2dc6ec4b2af7934e2213569ed7c8a757e59edb45b0c3","source":"amazon-inspector","versions":["0.1.101"]},{"id":"pypi/GENERIC-standard-pypi-install-pentest/privacypass-py","import_time":"2026-11-01T09:35:59.414959083Z","modified_time":"2026-11-01T09:03:03.776904Z","sha256":"1c4699b191565636c74fc5e6e8ece237bb0186ca11f021298ac91b2931756c09","source":"kam193","versions":["0.1.99","0.1.100","0.1.101"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-18435","published":"2026-11-01T08:01:23Z","modified":"2026-11-12T03:45:03.273800640Z","summary":"Malicious code in privacypass-py (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (0ca6e88317dac5ec524d2dc6ec4b2af7934e2213569ed7c8a757e59edb45b0c3)\nThe package presents itself as 'Privacy Pass client primitives' but ships no cryptographic functionality. Its only runtime effect is a data-exfiltration beacon. setup.py invokes a `_report()` routine during build/install that collects hostname, username, current working directory, argv, the parent process command line read from /proc/<ppid>/cmdline, and environment variable names and values matching credential-related prefixes (AWS_, GITHUB_, PIP_, and others), then POSTs the JSON payload to the hardcoded bare-IP endpoint http://85.190.112.236:8881/b/<nonce> over plain HTTP. privacypass_py/__init__.py repeats the same beacon at module top level, calling `_report('import')` on every `import privacypass_py` with an expanded prefix list (CLOUDFLARE_, SUPERTOKENS, HOME, USER, PATH) and an additional `secretish_names` list filtered by substrings KEY/SECRET/TOKEN/PASS/CRED/PRIVATE/SEED/MNEMONIC/SIGNATURE/COOKIE/SESSION/AUTH, sent to http://85.190.112.236:8881/f/<nonce>. The import-time path fires outside pip build isolation. The name and description function as cover for a package whose only shipped code is the beacon.\n\n## Source: kam193 (1c4699b191565636c74fc5e6e8ece237bb0186ca11f021298ac91b2931756c09)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n","affected":[{"package":{"name":"privacypass-py","ecosystem":"PyPI","purl":"pkg:pypi/privacypass-py"},"versions":["0.1.101","0.1.99","0.1.100"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"setup.py","sha256":"cea0614f670c026bcdd5bc600a13e5463c28d46412c242cd38739bcfee596810","tlsh":"9f415490ef227c7282d605096828459473bab90f2aa17474f6de23752f9e03982f3e56"},{"path":"privacypass_py/__init__.py","sha256":"4862a75e16b2e466f28ba5d71ee6097729502ac5e9294ebbdd0f069004ff5c96","tlsh":"f7515290ed229d33c29f411e2c1448e0333af40f36556535bacd2678af9d02d52f2d9a"}],"package_integrity":[{"filename":"privacypass_py-0.1.101.tar.gz","hashes":{"blake2b_256":"29851396f302ddcb3f730480a1de58a24b39982843a6aed068c33011cd3fd35e","md5":"e6c7c197293a5ae366da64052d704a35","sha256":"2427b1b03b2bdb8deab5d0d3d56273e462c59ff0d64f3134ff128745d69ecff3"}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/privacypass-py/MAL-2026-18435.json"}}],"references":[{"type":"PACKAGE","url":"https://pypi.org/project/privacypass-py/0.1.101/"},{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/privacypass-py"},{"type":"PACKAGE","url":"https://pypi.org/project/privacypass-py/0.1.100/"}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-022471","import_time":"2026-11-01T08:14:47.241746113Z","modified_time":"2026-11-01T08:01:23Z","sha256":"0ca6e88317dac5ec524d2dc6ec4b2af7934e2213569ed7c8a757e59edb45b0c3","source":"amazon-inspector","versions":["0.1.101"]},{"id":"pypi/GENERIC-standard-pypi-install-pentest/privacypass-py","import_time":"2026-11-01T09:35:59.414959083Z","modified_time":"2026-11-01T09:03:03.776904Z","sha256":"1c4699b191565636c74fc5e6e8ece237bb0186ca11f021298ac91b2931756c09","source":"kam193","versions":["0.1.99","0.1.100","0.1.101"]},{"id":"IN-MAL-2026-022637","import_time":"2026-11-12T03:36:56.520042856Z","modified_time":"2026-11-12T03:35:50Z","sha256":"43b30cafa942acc32671e02709b88db00fab4a68602979f1509bd4d69dfadeab","source":"amazon-inspector","versions":["0.1.100"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}
|
||||
@@ -1 +1 @@
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-18490","published":"2026-11-02T22:11:26Z","modified":"2026-11-02T23:15:02.874644797Z","summary":"Malicious code in pyprig (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (11f4beddcb42e2348d31d2ef0605d72198a28e796467c8afbac5c5c30d870315)\nClone of a legitimate Pydantic package with the added downloading of a remote code. The remote code is delivered from the GitHub repository and unpacked as a new module and then called during initialization of any models (runner injected into cloned Pydantic code). During analysis, the remote code was just a placeholder.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-11-pyprig\n\n\nReasons (based on the campaign):\n\n\n - Downloads and executes a remote malicious script.\n\n\n - clones-real-package\n","affected":[{"package":{"name":"pyprig","ecosystem":"PyPI","purl":"pkg:pypi/pyprig"},"versions":["1.2.0","1.2.1","1.2.2"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/pyprig/MAL-2026-18490.json"}}],"references":[{"type":"WEB","url":"https://github.com/PyPrig/pyprig-validation-toolkit"},{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/pyprig"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/2026-11-pyprig/pyprig","import_time":"2026-11-02T23:10:57.383268222Z","modified_time":"2026-11-02T22:11:26.957755Z","sha256":"11f4beddcb42e2348d31d2ef0605d72198a28e796467c8afbac5c5c30d870315","source":"kam193","versions":["1.2.0","1.2.1","1.2.2"]}]},"credits":[{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-18490","published":"2026-11-02T22:11:26Z","modified":"2026-11-12T04:30:04.152916010Z","summary":"Malicious code in pyprig (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (83ccb335aa01c8a31acb208aa2f1c2654ab010f9f3cc29fd2f1e6f60a44113f8)\npyprig impersonates pydantic: the package name, description ('Data validation using Python type hints'), and README are near-verbatim clones of pydantic, and pyproject.toml lists pydantic's real maintainers (Samuel Colvin, Eric Jolibois, Hasan Ramezani, David Hewitt, et al.) as authors. The top-level pyprig/__init__.py unconditionally calls get_help() from pyprig/help.py on every import. get_help() downloads https://github.com/PyPrig/pyprig-help/archive/refs/heads/main.zip from the mutable main branch with no commit pin and no hash or signature verification, then extracts the archive into the installed package tree at <site-packages>/pyprig/help/ via archive.extractall followed by shutil.copytree into HELP_DIR = PACKAGE_DIR / 'help'. Because the files land inside the Python package directory, whoever controls the PyPrig/pyprig-help repository can replace them at any time to stage Python files that are then importable from within the package, giving arbitrary code execution on any machine that imports pyprig after the swap.\n\n## Source: kam193 (11f4beddcb42e2348d31d2ef0605d72198a28e796467c8afbac5c5c30d870315)\nClone of a legitimate Pydantic package with the added downloading of a remote code. The remote code is delivered from the GitHub repository and unpacked as a new module and then called during initialization of any models (runner injected into cloned Pydantic code). During analysis, the remote code was just a placeholder.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-11-pyprig\n\n\nReasons (based on the campaign):\n\n\n - Downloads and executes a remote malicious script.\n\n\n - clones-real-package\n","affected":[{"package":{"name":"pyprig","ecosystem":"PyPI","purl":"pkg:pypi/pyprig"},"versions":["1.2.0","1.2.1","1.2.2"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"pyprig/help.py","sha256":"faf8ee4f5fa421e08ccc4a38349cdc4c938b04887fba173aeca33497db31ee3c","tlsh":"9a411f534c93319091b8e50c5ed59497f323f1c32ebb58a336bc5f642fb0ad1a2e9289"},{"path":"pyproject.toml","sha256":"8cecd88a3bf9b539fbd0153d872772a0ec6b6615ade8332513f318cb03c49889","tlsh":"d202b6b394fb11b72a8b5513d1ac4e4257246073ee82b5a8bdec85885fcceadc1b1138"}],"package_integrity":[{"filename":"pyprig-1.2.1-py3-none-any.whl","hashes":{"blake2b_256":"46f7103e59c83d57032c7de914561a40c79e7fb9d03d4b3caa5f0f6bdcd91744","md5":"d8546bf9f83687c9d153165cbeb5f072","sha256":"700038278fe5e82f7ba5e2833ea578c6b7441f7b9368f0fbef5a6491b835a81f"}},{"filename":"pyprig-1.2.1.tar.gz","hashes":{"blake2b_256":"f35f97c643ac0a5fdf85b73ff94ab380a34663ad7f65d8df37ed79d8517cb892","md5":"e427ad9010e761f2cb90809b257682d3","sha256":"74a0ff110c95245ad491eba59bc417f7fbf8ad0cf234d2be5124a4970de1b438"}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/pyprig/MAL-2026-18490.json"}}],"references":[{"type":"WEB","url":"https://github.com/PyPrig/pyprig-validation-toolkit"},{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/pyprig"},{"type":"PACKAGE","url":"https://pypi.org/project/pyprig/1.2.1/"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/2026-11-pyprig/pyprig","import_time":"2026-11-02T23:10:57.383268222Z","modified_time":"2026-11-02T22:11:26.957755Z","sha256":"11f4beddcb42e2348d31d2ef0605d72198a28e796467c8afbac5c5c30d870315","source":"kam193","versions":["1.2.0","1.2.1","1.2.2"]},{"id":"IN-MAL-2026-022640","import_time":"2026-11-12T04:13:27.083157068Z","modified_time":"2026-11-12T03:39:49Z","sha256":"83ccb335aa01c8a31acb208aa2f1c2654ab010f9f3cc29fd2f1e6f60a44113f8","source":"amazon-inspector","versions":["1.2.1"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}
|
||||
@@ -1 +1 @@
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-18627","published":"2026-11-04T16:11:42Z","modified":"2026-11-04T16:45:04.332052887Z","summary":"Malicious code in msgpackrpc (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (9747a902bd61a745ec9c8f569f57417303f828b441c3e4e8c95101adf1498d13)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n","affected":[{"package":{"name":"msgpackrpc","ecosystem":"PyPI","purl":"pkg:pypi/msgpackrpc"},"versions":["0.0.0","0.1.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/msgpackrpc/MAL-2026-18627.json"}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/msgpackrpc"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/GENERIC-standard-pypi-install-pentest/msgpackrpc","import_time":"2026-11-04T16:37:36.802736375Z","modified_time":"2026-11-04T16:11:42.068096Z","sha256":"9747a902bd61a745ec9c8f569f57417303f828b441c3e4e8c95101adf1498d13","source":"kam193","versions":["0.0.0","0.1.0"]}]},"credits":[{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-18627","published":"2026-11-04T16:11:42Z","modified":"2026-11-12T00:45:06.780823829Z","summary":"Malicious code in msgpackrpc (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (55c4f419c883d30c0099a7120b0456d975af824e08310e0750166d074def3204)\nThe sdist's setup.py overrides the install command with a class that, during `pip install`, collects the installer's hostname via socket.gethostname() and resolves its IP via socket.gethostbyname(), then POSTs them as JSON to a hardcoded webhook.site collector URL (https://webhook.site/711f31ae-7091-4b68-9631-57b6c6f19980) using urllib.request.urlopen. The package ships no actual functionality: msgpackrpc/__init__.py is empty, the project metadata self-describes as a 'POC package (beacon-only)', and the author field is the placeholder 'Your Name'. The package name is a typosquat shape against the legitimate msgpack-rpc ecosystem. Installing this version causes the installer's host identifiers to leave the machine to an attacker-controlled endpoint with no disclosure or consent.\n\n## Source: kam193 (9747a902bd61a745ec9c8f569f57417303f828b441c3e4e8c95101adf1498d13)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n","affected":[{"package":{"name":"msgpackrpc","ecosystem":"PyPI","purl":"pkg:pypi/msgpackrpc"},"versions":["0.0.0","0.1.0"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"artifacts":["msgpackrpc-0.1.0.tar.gz"],"path":"setup.py","sha256":"5e3b5827437a8bd3649abf9f1df6957904acb8eff37c4b217f35777ce1a329ce","tlsh":"7e11ef92f872b165bb8321d0086789653693ba0bbb02ec6d3dcc43584fae439d861658"},{"artifacts":["msgpackrpc-0.1.0.tar.gz"],"path":"pyproject.toml","sha256":"e6d8a6e833ab20a03d2d5646688bf639eb21d6ec3a11362207ade35eac9c0188","tlsh":"d3e07d23cbb7db40adc210412019b484debaf45531c081485fcbc1c5a5cd48acbde824"}],"package_integrity":[{"filename":"msgpackrpc-0.1.0.tar.gz","hashes":{"blake2b_256":"889692f8afddd60dbe93c6700f6aacc245b4a5aea74686acfadc959f757c6792","md5":"64a7bb442d523e701f9e9c0a000ade16","sha256":"3d959a9588a3fb96d4a558484dca090c4d3a42a6bdbb8d38882bda9ef7a7c4da"}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/msgpackrpc/MAL-2026-18627.json"}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/msgpackrpc"},{"type":"PACKAGE","url":"https://pypi.org/project/msgpackrpc/0.1.0/"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/GENERIC-standard-pypi-install-pentest/msgpackrpc","import_time":"2026-11-04T16:37:36.802736375Z","modified_time":"2026-11-04T16:11:42.068096Z","sha256":"9747a902bd61a745ec9c8f569f57417303f828b441c3e4e8c95101adf1498d13","source":"kam193","versions":["0.0.0","0.1.0"]},{"id":"IN-MAL-2026-022626","import_time":"2026-11-12T00:30:24.934663162Z","modified_time":"2026-11-11T23:47:58Z","sha256":"55c4f419c883d30c0099a7120b0456d975af824e08310e0750166d074def3204","source":"amazon-inspector","versions":["0.1.0"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}
|
||||
File diff suppressed because one or more lines are too long
@@ -1 +1 @@
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-18746","published":"2026-11-07T08:32:18Z","modified":"2026-11-07T08:45:03.213207645Z","summary":"Malicious code in genblaze-fal (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (253796cb8693d039c09267f3d6d398031e3ad27640bb70f21f2e75d2578be649)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n","affected":[{"package":{"name":"genblaze-fal","ecosystem":"PyPI","purl":"pkg:pypi/genblaze-fal"},"versions":["0.1.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/genblaze-fal/MAL-2026-18746.json"}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/genblaze-fal"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/GENERIC-standard-pypi-install-pentest/genblaze-fal","import_time":"2026-11-07T08:36:36.403321334Z","modified_time":"2026-11-07T08:32:18.92264Z","sha256":"253796cb8693d039c09267f3d6d398031e3ad27640bb70f21f2e75d2578be649","source":"kam193","versions":["0.1.0"]}]},"credits":[{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-18746","published":"2026-11-07T08:32:18Z","modified":"2026-11-12T03:45:03.293519056Z","summary":"Malicious code in genblaze-fal (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (8a271155be7da40cba43376d6a085b75a96c0bb9fed885c421424bc42fd8d07b)\nsetup.py defines custom build_py and install cmdclasses that, on sdist build and install, POST a JSON payload containing the installer's hostname, current working directory, install path, Python version, and a timestamp to the hardcoded bare-IP URL http://13.140.137.222:8787/_ah/dc over plain HTTP. The destination is a bare IPv4 address on a non-standard port with no TLS and no relation to any declared publisher domain. A source-code comment labels the behavior an 'authorized dependency-confusion canary', but the package is published on public PyPI where any installer who resolves this name will transmit their host identifiers to that endpoint. The sdist is the only distribution file and auto-executes on default pip install for every listed platform.\n\n## Source: kam193 (253796cb8693d039c09267f3d6d398031e3ad27640bb70f21f2e75d2578be649)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n","affected":[{"package":{"name":"genblaze-fal","ecosystem":"PyPI","purl":"pkg:pypi/genblaze-fal"},"versions":["0.1.0"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"artifacts":["genblaze_fal-0.1.0.tar.gz"],"path":"setup.py","sha256":"a9ba1e323ebfe7804887462cae68afed20996aa58049e9f8286940031900c40a","tlsh":"2b418660c92609787ecb41a5a8fb66947332ba272d40bc9578cd07481f0f0ff89b72c5"}],"package_integrity":[{"filename":"genblaze_fal-0.1.0.tar.gz","hashes":{"blake2b_256":"14f156c083988e29272500c0dd47e8c55d765925740c4d9fa8555876b303bb20","md5":"e1c3bc03bb78e4b7ef71ab5c9c4b99b5","sha256":"ac4c445f1701dd9a99150129ab196e77ad207d1295c99d6dc95b01636b88d454"}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/genblaze-fal/MAL-2026-18746.json"}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/genblaze-fal"},{"type":"PACKAGE","url":"https://pypi.org/project/genblaze-fal/0.1.0/"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/GENERIC-standard-pypi-install-pentest/genblaze-fal","import_time":"2026-11-07T08:36:36.403321334Z","modified_time":"2026-11-07T08:32:18.92264Z","sha256":"253796cb8693d039c09267f3d6d398031e3ad27640bb70f21f2e75d2578be649","source":"kam193","versions":["0.1.0"]},{"id":"IN-MAL-2026-022627","import_time":"2026-11-12T03:36:56.209736663Z","modified_time":"2026-11-12T03:31:54Z","sha256":"8a271155be7da40cba43376d6a085b75a96c0bb9fed885c421424bc42fd8d07b","source":"amazon-inspector","versions":["0.1.0"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}
|
||||
@@ -1 +1 @@
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-18747","published":"2026-11-07T08:34:31Z","modified":"2026-11-07T09:15:03.145542032Z","summary":"Malicious code in genblaze-atlascloud (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (c8d0787ea4049d0bb0321d1b25591f303ee2a5d5351aeb725a67250d0ddf4188)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n","affected":[{"package":{"name":"genblaze-atlascloud","ecosystem":"PyPI","purl":"pkg:pypi/genblaze-atlascloud"},"versions":["0.1.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/genblaze-atlascloud/MAL-2026-18747.json"}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/genblaze-atlascloud"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/GENERIC-standard-pypi-install-pentest/genblaze-atlascloud","import_time":"2026-11-07T09:11:45.278379612Z","modified_time":"2026-11-07T08:34:31.241966Z","sha256":"c8d0787ea4049d0bb0321d1b25591f303ee2a5d5351aeb725a67250d0ddf4188","source":"kam193","versions":["0.1.0"]}]},"credits":[{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-18747","published":"2026-11-07T08:34:31Z","modified":"2026-11-12T03:45:03.294926426Z","summary":"Malicious code in genblaze-atlascloud (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (6279c5d7cd957549bcecd8c2e4aa1377bf53c114341a3350a23464de6e18bad9)\nsetup.py registers custom build_py and install cmdclasses that, on every `pip install` or sdist build, POST a JSON payload containing socket.gethostname(), the install path, os.getcwd(), the Python version, and a canary identifier to the hardcoded bare-IP endpoint http://13.140.137.222:8787/_ah/dc over plain HTTP. The destination is a non-publisher bare IP, there is no opt-in, and the package name resembles an internal vendor name, so any environment whose internal dependency resolves to this public name has host and path identifiers transmitted off-host at install time. The long_description self-labels this as an 'authorized dependency-confusion canary' targeting Backblaze/Bugcrowd, but the exfiltration mechanism is identical to a hostile dependency-confusion payload and the authorization claim is author-controlled text that an installer cannot verify at install time.\n\n## Source: kam193 (c8d0787ea4049d0bb0321d1b25591f303ee2a5d5351aeb725a67250d0ddf4188)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n","affected":[{"package":{"name":"genblaze-atlascloud","ecosystem":"PyPI","purl":"pkg:pypi/genblaze-atlascloud"},"versions":["0.1.0"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"artifacts":["genblaze_atlascloud-0.1.0.tar.gz"],"path":"setup.py","sha256":"2fa7b8d44c0523e237e79a3ebf0dc4f8e3a94dafe9d2ec1cbc0ccf7fd6e58d19","tlsh":"25419671c92209783ecb41a998f756506332ea271d41bc95b8cd07481f0f0ff89b71c1"}],"package_integrity":[{"filename":"genblaze_atlascloud-0.1.0.tar.gz","hashes":{"blake2b_256":"69b1dd23d9743b78fdd11627101ce24aef63829c0f43e3ad73325516e52f266d","md5":"9afee767843f9394f99104a7e502dbba","sha256":"bdac6b1140ac33683d52641e6031ab5b6263dabb4d74eee373d1d1b32c4a9633"}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/genblaze-atlascloud/MAL-2026-18747.json"}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/genblaze-atlascloud"},{"type":"PACKAGE","url":"https://pypi.org/project/genblaze-atlascloud/0.1.0/"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/GENERIC-standard-pypi-install-pentest/genblaze-atlascloud","import_time":"2026-11-07T09:11:45.278379612Z","modified_time":"2026-11-07T08:34:31.241966Z","sha256":"c8d0787ea4049d0bb0321d1b25591f303ee2a5d5351aeb725a67250d0ddf4188","source":"kam193","versions":["0.1.0"]},{"id":"IN-MAL-2026-022628","import_time":"2026-11-12T03:36:56.256874897Z","modified_time":"2026-11-12T03:33:44Z","sha256":"6279c5d7cd957549bcecd8c2e4aa1377bf53c114341a3350a23464de6e18bad9","source":"amazon-inspector","versions":["0.1.0"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}
|
||||
@@ -1 +1 @@
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-18769","published":"2026-11-08T13:51:47Z","modified":"2026-11-08T14:15:05.147670216Z","summary":"Malicious code in lookuptest11 (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (fe5cc784eb96a4025bcd45731fcb19c3826a122a02ec4fed1cbee875fa2ca98b)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n","affected":[{"package":{"name":"lookuptest11","ecosystem":"PyPI","purl":"pkg:pypi/lookuptest11"},"versions":["0.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/lookuptest11/MAL-2026-18769.json"}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/lookuptest11"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/GENERIC-standard-pypi-install-pentest/lookuptest11","import_time":"2026-11-08T14:10:37.569263977Z","modified_time":"2026-11-08T13:51:47.432846Z","sha256":"fe5cc784eb96a4025bcd45731fcb19c3826a122a02ec4fed1cbee875fa2ca98b","source":"kam193","versions":["0.0.1"]}]},"credits":[{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-18769","published":"2026-11-08T13:51:47Z","modified":"2026-11-12T00:45:06.791373992Z","summary":"Malicious code in lookuptest11 (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (5e9ac24971ad447f0248f201416c1921ca268ddb73ad057eee44eaf4868efb17)\nlookuptest11 0.0.1 performs DNS-based exfiltration of installer identity to the attacker-controlled domain testa213022.dssldrf.net. setup.py constructs a subdomain label of the form install-<random>-<hostname> from platform.node() and calls socket.getaddrinfo(label.testa213022.dssldrf.net, 80), causing the authoritative nameserver for that domain to receive the installer's hostname on every sdist build. gcp_log_poc/__init__.py performs the equivalent lookup with an import-<random>-<hostname> label at module load, so the same leak fires on every import of the installed wheel. The package exposes no functional API consistent with its name; the DNS calls are the only observable behavior and have no build or runtime purpose other than delivering host identifiers to the operator of testa213022.dssldrf.net.\n\n## Source: kam193 (fe5cc784eb96a4025bcd45731fcb19c3826a122a02ec4fed1cbee875fa2ca98b)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n","affected":[{"package":{"name":"lookuptest11","ecosystem":"PyPI","purl":"pkg:pypi/lookuptest11"},"versions":["0.0.1"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"artifacts":["lookuptest11-0.0.1.tar.gz"],"path":"setup.py","sha256":"3ccf00a87011bd3d73996310920d3ed92e43ac1c9f620b6eab83da6b18a6a023","tlsh":"8ce06a02c7339c5319a0168904f520b14f3f46133f32144d77c503205f9f05a8436617"},{"artifacts":["lookuptest11-0.0.1.tar.gz","lookuptest11-0.0.1-py3-none-any.whl"],"path":"gcp_log_poc/__init__.py","sha256":"4f4433d1b9b0dfe50d840daa089f6e931b6e984b1f9dc41fc41fa80a8299137e","tlsh":"0cd02b07e3b59c43a66222c700e871719e7f81026f2a1c6e69991b91cfaa4649535b54"}],"package_integrity":[{"filename":"lookuptest11-0.0.1-py3-none-any.whl","hashes":{"blake2b_256":"b173948ea61f9b3013a0f9f775a3909487f7dddf425d2fc916d08ce883a74867","md5":"f6e29412b0dc4d937f1e847cbbdec816","sha256":"74173d4860dfe393aa6a45e3382eb2075df92ccfb194fedfac3b7c2539038765"}},{"filename":"lookuptest11-0.0.1.tar.gz","hashes":{"blake2b_256":"feecdc8d300614c7199e8579ae2861b17f8f522a8693aa9d392fe3ce29d3858a","md5":"c6a2113b43e9c62773c6d4e62dc0d515","sha256":"c8874aaaf0544cf5207f3de9a19611e3d9e5ef1657747e20b69e1d7354df628c"}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/lookuptest11/MAL-2026-18769.json"}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/lookuptest11"},{"type":"PACKAGE","url":"https://pypi.org/project/lookuptest11/0.0.1/"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/GENERIC-standard-pypi-install-pentest/lookuptest11","import_time":"2026-11-08T14:10:37.569263977Z","modified_time":"2026-11-08T13:51:47.432846Z","sha256":"fe5cc784eb96a4025bcd45731fcb19c3826a122a02ec4fed1cbee875fa2ca98b","source":"kam193","versions":["0.0.1"]},{"id":"IN-MAL-2026-022624","import_time":"2026-11-12T00:30:24.653151672Z","modified_time":"2026-11-11T23:47:12Z","sha256":"5e9ac24971ad447f0248f201416c1921ca268ddb73ad057eee44eaf4868efb17","source":"amazon-inspector","versions":["0.0.1"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}
|
||||
@@ -1 +1 @@
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-18772","published":"2026-11-08T21:45:25Z","modified":"2026-11-08T22:45:03.359292162Z","summary":"Malicious code in parseyaml (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (21f0c643e1ed1b11c56bfdd5f7567b2c0172924c227206b8ab9e4210918c6ee3)\nIn this campaign, remote code is executed via a dependency pretending to be a YAML loader but embedding a special loader executing code from a provided file. During analysis, the code was just a stub.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-11-parseyaml\n\n\nReasons (based on the campaign):\n\n\n - The malicious code is intentionally included in a dependency of the package\n\n\n - Downloads and executes a remote malicious script.\n","affected":[{"package":{"name":"parseyaml","ecosystem":"PyPI","purl":"pkg:pypi/parseyaml"},"versions":["1.2.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/parseyaml/MAL-2026-18772.json"}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/parseyaml"}],"database_specific":{"iocs":{"urls":["https://plainraw.com/raw/99b69bda4246"]},"malicious-packages-origins":[{"id":"pypi/2026-11-parseyaml/parseyaml","import_time":"2026-11-08T22:36:34.682518859Z","modified_time":"2026-11-08T21:45:25.933688Z","sha256":"21f0c643e1ed1b11c56bfdd5f7567b2c0172924c227206b8ab9e4210918c6ee3","source":"kam193","versions":["1.2.0"]}]},"credits":[{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-18772","published":"2026-11-08T21:45:25Z","modified":"2026-11-12T03:45:03.276981731Z","summary":"Malicious code in parseyaml (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (42b56cbea8e7b46f2ad7dc1d59334a45862f50366944ee198e97c68a313681ef)\nparseyaml 1.2.0 advertises itself as a PyYAML wrapper whose `safe_load`, `load(loader=\"safe\")`, `load(loader=\"full\")`, and `load(loader=\"base\")` entry points return only basic YAML types. The implementation defines `_LOADERS = {\"default\": UnsafePyLoader, \"safe\": UnsafePyLoader, \"full\": UnsafePyLoader, \"base\": UnsafePyLoader, \"unsafe_py\": UnsafePyLoader}`, so every documented safe-loader name resolves to `UnsafePyLoader`. `UnsafePyLoader` registers a `!py` tag constructor (`_unsafe_py_constructor`) that calls `exec(code, {})` on the scalar body of the tag. Any caller that follows the package's own documentation and feeds attacker-supplied YAML containing a `!py` tag through what it believes is a safe loader will execute attacker-controlled Python in the host process. The exec sink is hidden inside loader names explicitly promised to be safe for untrusted input, which is a backdoor built into the advertised safe API rather than a documented unsafe option.\n\n## Source: kam193 (21f0c643e1ed1b11c56bfdd5f7567b2c0172924c227206b8ab9e4210918c6ee3)\nIn this campaign, remote code is executed via a dependency pretending to be a YAML loader but embedding a special loader executing code from a provided file. During analysis, the code was just a stub.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-11-parseyaml\n\n\nReasons (based on the campaign):\n\n\n - The malicious code is intentionally included in a dependency of the package\n\n\n - Downloads and executes a remote malicious script.\n","affected":[{"package":{"name":"parseyaml","ecosystem":"PyPI","purl":"pkg:pypi/parseyaml"},"versions":["1.2.0"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"artifacts":["parseyaml-1.2.0.tar.gz","parseyaml-1.2.0-py3-none-any.whl"],"path":"parseyaml/core.py","sha256":"acac40be1b8b623d2780ca0107d1496cc6840aff82fc1fafe714f8820ec840a9","tlsh":"acd13543e650ed924740deb5691afe42ada8bf470d0075b5bcacc12c9fda0adf0b45d8"}],"package_integrity":[{"filename":"parseyaml-1.2.0-py3-none-any.whl","hashes":{"blake2b_256":"c9d370fc0dcf046594bd36afa695732e0312c3e98eeb27fc7e4e3b9be4a57edf","md5":"9c8cbae2e8005002dcb2e11ee460b060","sha256":"9fe4bb1b97e5945c3d291465e32b325c3fbb0f0a50c92f9e925831296a47898d"}},{"filename":"parseyaml-1.2.0.tar.gz","hashes":{"blake2b_256":"6ba29e013de73cccde58773a53a842aaff7d685dd05134cc08754846710fe5b0","md5":"0060d69225b4f6d44cadc1a06c29b224","sha256":"5fe6da25a8b07825af947a478e9ce783386ce9504d8870c96a9e03aa284c405e"}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/parseyaml/MAL-2026-18772.json"}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/parseyaml"},{"type":"PACKAGE","url":"https://pypi.org/project/parseyaml/1.2.0/"}],"database_specific":{"iocs":{"urls":["https://plainraw.com/raw/99b69bda4246"]},"malicious-packages-origins":[{"id":"pypi/2026-11-parseyaml/parseyaml","import_time":"2026-11-08T22:36:34.682518859Z","modified_time":"2026-11-08T21:45:25.933688Z","sha256":"21f0c643e1ed1b11c56bfdd5f7567b2c0172924c227206b8ab9e4210918c6ee3","source":"kam193","versions":["1.2.0"]},{"id":"IN-MAL-2026-022636","import_time":"2026-11-12T03:36:56.495828396Z","modified_time":"2026-11-12T03:35:38Z","sha256":"42b56cbea8e7b46f2ad7dc1d59334a45862f50366944ee198e97c68a313681ef","source":"amazon-inspector","versions":["1.2.0"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}
|
||||
File diff suppressed because one or more lines are too long
@@ -1 +1 @@
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-19116","published":"2026-11-11T08:34:00Z","modified":"2026-11-11T09:15:03.056260589Z","summary":"Malicious code in humbility-shared (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (bad6120ea5f69f851eafe78dfbb832979077fa6c0175c2bdda88bf073b8ad487)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n","affected":[{"package":{"name":"humbility-shared","ecosystem":"PyPI","purl":"pkg:pypi/humbility-shared"},"versions":["0.0.1","0.0.2"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/humbility-shared/MAL-2026-19116.json"}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/humbility-shared"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/GENERIC-standard-pypi-install-pentest/humbility-shared","import_time":"2026-11-11T09:13:15.507864771Z","modified_time":"2026-11-11T08:34:00.054982Z","sha256":"bad6120ea5f69f851eafe78dfbb832979077fa6c0175c2bdda88bf073b8ad487","source":"kam193","versions":["0.0.1","0.0.2"]}]},"credits":[{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-19116","published":"2026-11-11T08:34:00Z","modified":"2026-11-12T03:45:03.252954552Z","summary":"Malicious code in humbility-shared (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (62ef2123979b9b0569b31e090e1b575bc392c7e40aa1367eed178147b4931c4c)\nsetup.py defines a custom install cmdclass (PostInstall) that runs on `pip install` and collects installer-side identifiers — hostname, USER/USERNAME, current working directory, VIRTUAL_ENV, and CI-related environment variables — and POSTs them as JSON to a hardcoded interactsh collector at https://dbq1g44hj5j25tbieep0dmbhfakw1pyzc.oast.fun/humbility-shared, with an accompanying DNS prefetch of a package-named subdomain under the same canary host. The destination is not the installer's infrastructure and is not caller-configurable; the behavior is undisclosed and fires automatically from the sdist build on a default install when no matching wheel is available, and the shipped wheel installs the same package tree. The name and shape are consistent with a dependency-confusion canary squatting an internal package name on public PyPI to fingerprint build systems that resolve the public name instead of the intended private one.\n\n## Source: kam193 (bad6120ea5f69f851eafe78dfbb832979077fa6c0175c2bdda88bf073b8ad487)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n","affected":[{"package":{"name":"humbility-shared","ecosystem":"PyPI","purl":"pkg:pypi/humbility-shared"},"versions":["0.0.1","0.0.2"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"artifacts":["humbility_shared-0.0.2.tar.gz"],"path":"setup.py","sha256":"2f2be1b7fb18274dc30f47aaf56a34c2d8ae0e9b19936592f3fd75cfededebb3","tlsh":"0f418102d9841cb297d350926c3362593332e113ae026c697ddc438c1f8f6adc1b63ed"}],"package_integrity":[{"filename":"humbility_shared-0.0.2-py3-none-any.whl","hashes":{"blake2b_256":"ad7e79f8992fc515300b826dcd2052fa7b5796a2ed313507563c9829d25df0b4","md5":"78de8334e0f7aced9018f240cb0bc93b","sha256":"21c40f3e99f9e54a98c8e91dd5bd5f2aaac9b1f46a54780d45d7c9467bd0898e"}},{"filename":"humbility_shared-0.0.2.tar.gz","hashes":{"blake2b_256":"92ea637044133555d84f9d1477ecc6125f2b0088ee56e0f6e7f4c354dfad5bb6","md5":"50219a1385c5f4bfecd3469ec8b4536e","sha256":"29ab708e58228ef5aff4161640ed142c5bd78b7247ecd1a5848df34f914e8946"}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/humbility-shared/MAL-2026-19116.json"}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/humbility-shared"},{"type":"PACKAGE","url":"https://pypi.org/project/humbility-shared/0.0.2/"},{"type":"PACKAGE","url":"https://pypi.org/project/humbility-shared/0.0.1/"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/GENERIC-standard-pypi-install-pentest/humbility-shared","import_time":"2026-11-11T09:13:15.507864771Z","modified_time":"2026-11-11T08:34:00.054982Z","sha256":"bad6120ea5f69f851eafe78dfbb832979077fa6c0175c2bdda88bf073b8ad487","source":"kam193","versions":["0.0.1","0.0.2"]},{"id":"IN-MAL-2026-022629","import_time":"2026-11-12T03:36:56.282613971Z","modified_time":"2026-11-12T03:34:03Z","sha256":"5a497af9223d888f88e6c87b0031bac56d6b2f42241dca333067882c7066051c","source":"amazon-inspector","versions":["0.0.2"]},{"id":"IN-MAL-2026-022630","import_time":"2026-11-12T03:36:56.311810489Z","modified_time":"2026-11-12T03:34:14Z","sha256":"62ef2123979b9b0569b31e090e1b575bc392c7e40aa1367eed178147b4931c4c","source":"amazon-inspector","versions":["0.0.1"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}
|
||||
File diff suppressed because one or more lines are too long
@@ -1 +1 @@
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-14420","published":"2026-08-24T16:39:13Z","modified":"2026-11-09T19:30:08.197082667Z","aliases":["GHSA-px6w-4894-4v4g"],"summary":"Malicious code in @gsas/gsas-sdk (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (2242b683433d5fe37b3997185d251799a4606a456e516da08586775d11f0cb7e)\n@gsas/gsas-sdk@999.9.15 is a high-version public-registry squat targeting an internal `@gsas/gsas-sdk` name. package.json declares `preinstall: node index.js`, and index.js runs on install to collect the installer's hostname, username, home directory, cwd, local/public/resolver IPs, npm registry URL, CI platform with repo/actor/run/workflow/runner, AWS region, git email domain, and the consuming project's name/author/repo/homepage. It also spawns `gh api user --jq.login`, `npm whoami`, and `git config user.email` to capture the developer's authenticated GitHub login, npm login, and email. The collected JSON is hex-encoded, split into 60-character chunks emitted as DNS subdomain queries under `da51rv0hb2uc72tg4gvgdepinjcallbk1.oast.fun`, and additionally POSTed over HTTP and HTTPS to the same host (path `/poc/<uuid>`). Public-IP discovery calls out to api.ipify.org, icanhazip.com, and ifconfig.me. Comments in the file describe the multi-channel design as intended to survive corporate egress filtering. An `AUTHORISED SECURITY RESEARCH` self-label appears in the source but does not correspond to installer consent.\n\n## Source: ghsa-malware (b4a4d5478af3008f72fc2e26628a07c123a391012d1e7aa4e3237ba81f195865)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"@gsas/gsas-sdk","ecosystem":"npm","purl":"pkg:npm/%40gsas/gsas-sdk"},"versions":["999.9.15","99.99.99","0.0.0-stage"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"index.js","sha256":"2c139fc213819236d576cb1952b0153d0f7c75539d7ea98d2404db5f2db490d6","tlsh":"ba12c79702f6243013e265682e8784d4776bd517378aebf0b94d47601fee26843b37ea"}],"package_integrity":[{"filename":"gsas-sdk-999.9.15.tgz","hashes":{"sha1":"f24de22c722f6c88824d6ce066d7f874ab80827d","sha512_sri":"sha512-kYvYaAe3qUq204TxDEohW7xbZkRVXq2c3N9mWeCdnkVxut307gDc75ufGeKh4CNPZKJXYVJuEb9uJGmxyC2zyA=="}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@gsas/gsas-sdk/MAL-2026-14420.json"}}],"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/@gsas/gsas-sdk/v/999.9.15"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-px6w-4894-4v4g"}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-018630","import_time":"2026-08-24T16:49:13.524152308Z","modified_time":"2026-08-24T16:39:13Z","sha256":"2242b683433d5fe37b3997185d251799a4606a456e516da08586775d11f0cb7e","source":"amazon-inspector","versions":["999.9.15"]},{"id":"GHSA-px6w-4894-4v4g","import_time":"2026-11-09T19:17:53.612165707Z","modified_time":"2026-11-09T17:37:26Z","sha256":"b4a4d5478af3008f72fc2e26628a07c123a391012d1e7aa4e3237ba81f195865","source":"ghsa-malware","versions":["99.99.99","0.0.0-stage"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"}]}
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-14420","published":"2026-08-24T16:39:13Z","modified":"2026-11-12T04:30:04.130543097Z","aliases":["GHSA-px6w-4894-4v4g"],"summary":"Malicious code in @gsas/gsas-sdk (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (2242b683433d5fe37b3997185d251799a4606a456e516da08586775d11f0cb7e)\n@gsas/gsas-sdk@999.9.15 is a high-version public-registry squat targeting an internal `@gsas/gsas-sdk` name. package.json declares `preinstall: node index.js`, and index.js runs on install to collect the installer's hostname, username, home directory, cwd, local/public/resolver IPs, npm registry URL, CI platform with repo/actor/run/workflow/runner, AWS region, git email domain, and the consuming project's name/author/repo/homepage. It also spawns `gh api user --jq.login`, `npm whoami`, and `git config user.email` to capture the developer's authenticated GitHub login, npm login, and email. The collected JSON is hex-encoded, split into 60-character chunks emitted as DNS subdomain queries under `da51rv0hb2uc72tg4gvgdepinjcallbk1.oast.fun`, and additionally POSTed over HTTP and HTTPS to the same host (path `/poc/<uuid>`). Public-IP discovery calls out to api.ipify.org, icanhazip.com, and ifconfig.me. Comments in the file describe the multi-channel design as intended to survive corporate egress filtering. An `AUTHORISED SECURITY RESEARCH` self-label appears in the source but does not correspond to installer consent.\n\n## Source: ghsa-malware (b4a4d5478af3008f72fc2e26628a07c123a391012d1e7aa4e3237ba81f195865)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"@gsas/gsas-sdk","ecosystem":"npm","purl":"pkg:npm/%40gsas/gsas-sdk"},"versions":["999.9.15","99.99.99","0.0.0-stage"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"index.js","sha256":"2c139fc213819236d576cb1952b0153d0f7c75539d7ea98d2404db5f2db490d6","tlsh":"ba12c79702f6243013e265682e8784d4776bd517378aebf0b94d47601fee26843b37ea"}],"package_integrity":[{"filename":"gsas-sdk-999.9.15.tgz","hashes":{"sha1":"f24de22c722f6c88824d6ce066d7f874ab80827d","sha512_sri":"sha512-kYvYaAe3qUq204TxDEohW7xbZkRVXq2c3N9mWeCdnkVxut307gDc75ufGeKh4CNPZKJXYVJuEb9uJGmxyC2zyA=="}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@gsas/gsas-sdk/MAL-2026-14420.json"}}],"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/@gsas/gsas-sdk/v/999.9.15"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-px6w-4894-4v4g"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@gsas/gsas-sdk/v/99.99.99"}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-018630","import_time":"2026-08-24T16:49:13.524152308Z","modified_time":"2026-08-24T16:39:13Z","sha256":"2242b683433d5fe37b3997185d251799a4606a456e516da08586775d11f0cb7e","source":"amazon-inspector","versions":["999.9.15"]},{"id":"GHSA-px6w-4894-4v4g","import_time":"2026-11-09T19:17:53.612165707Z","modified_time":"2026-11-09T17:37:26Z","sha256":"b4a4d5478af3008f72fc2e26628a07c123a391012d1e7aa4e3237ba81f195865","source":"ghsa-malware","versions":["99.99.99","0.0.0-stage"]},{"id":"IN-MAL-2026-022643","import_time":"2026-11-12T04:13:27.279033676Z","modified_time":"2026-11-12T04:09:18Z","sha256":"f5ec9ef5577833a63a9527f5ba88491493d4bba90e68c53d334513414e3c3723","source":"amazon-inspector","versions":["99.99.99"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"}]}
|
||||
@@ -1 +1 @@
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-18414","published":"2026-10-29T22:41:24Z","modified":"2026-11-02T05:30:05.756496023Z","aliases":["GHSA-x4jx-pc3h-93v6"],"summary":"Malicious code in @sxm-content-creators/tools-ds (npm)","details":"@sxm-content-creators/tools-ds is a dependency-confusion package with no functional code (its description is \"Authorized Test Package\"). Its postinstall script runs `node ./index.cjs` on npm install, which POSTs the hostname, home directory, platform and CI provider (GitHub Actions, GitLab CI, Azure Pipelines or Jenkins) to `https://130.162.231.177:8443/`. It was published by the npm account notsemz, which published two more packages with the same beacon on 2026-10-29 and seven placeholder-only names.\n\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (3413962fd6b4924514c7e2ea2fcc30b6c751163a8a798ffa5d38c21b4da941e8)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"@sxm-content-creators/tools-ds","ecosystem":"npm","purl":"pkg:npm/%40sxm-content-creators/tools-ds"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"versions":["1.0.1"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@sxm-content-creators/tools-ds/MAL-2026-18414.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-x4jx-pc3h-93v6"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@sxm-content-creators/tools-ds"}],"database_specific":{"iocs":{"files":[{"digests":{"sha256":"68ed5cd24401f8f6838fde935381d6ec6c31e987a4b18d31a9b85b0445989936"},"note":"postinstall runs `node ./index.cjs`, which POSTs hostname, home directory, platform and CI provider to 130.162.231.177:8443 (@sxm-content-creators/tools-ds@1.0.1).","paths":["package.json"],"source":"PACKAGE_ARCHIVE"},{"digests":{"sha256":"ed3b069f22e7825a461a071c42d1f8ee8113c553b6829429e236cf136ca247df"},"note":"Executed by the postinstall script of @sxm-content-creators/tools-ds@1.0.1.","paths":["index.cjs"],"source":"PACKAGE_ARCHIVE"}],"ips":["130.162.231.177"],"urls":["https://130.162.231.177:8443/","https://webhook.site/d730a68c-27bd-4bb5-b1b9-d57a0a4b17ac/semz"]},"malicious-packages-origins":[{"id":"GHSA-x4jx-pc3h-93v6","import_time":"2026-10-30T18:19:43.163273515Z","modified_time":"2026-10-30T18:06:20Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"3413962fd6b4924514c7e2ea2fcc30b6c751163a8a798ffa5d38c21b4da941e8","source":"ghsa-malware"}]},"credits":[{"name":"InvisiRisk, Inc.","contact":["https://www.invisirisk.com","mailto:research@invisirisk.com"],"type":"FINDER"}]}
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-18414","published":"2026-10-29T22:41:24Z","modified":"2026-11-12T05:15:04.596320899Z","aliases":["GHSA-x4jx-pc3h-93v6"],"summary":"Malicious code in @sxm-content-creators/tools-ds (npm)","details":"@sxm-content-creators/tools-ds is a dependency-confusion package with no functional code (its description is \"Authorized Test Package\"). Its postinstall script runs `node ./index.cjs` on npm install, which POSTs the hostname, home directory, platform and CI provider (GitHub Actions, GitLab CI, Azure Pipelines or Jenkins) to `https://130.162.231.177:8443/`. It was published by the npm account notsemz, which published two more packages with the same beacon on 2026-10-29 and seven placeholder-only names.\n\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (8b05391eed5aeb5b2df6a00ac95ee84f19e08a975532b60137dce712d32d8863)\nOn `npm install`, the package's postinstall hook executes `node./index.cjs`, which reads `os.hostname()`, `os.homedir()`, `process.platform`, and CI-provider environment variables (`GITHUB_ACTIONS`, `GITLAB_CI`, `TF_BUILD`, `JENKINS_URL`) and POSTs them as JSON over HTTPS to the hardcoded bare-IP endpoint https://130.162.231.177:8443/. The destination is a bare IP with no association to any declared publisher or documented purpose, and there is no caller-configurable alternative. The collected fields fingerprint whether the installer is a developer workstation or a specific CI pipeline, consistent with reconnaissance to prioritize follow-on targeting. The scoped package name resembles a legitimate internal namespace, consistent with a dependency-confusion lure shape.\n\n## Source: ghsa-malware (3413962fd6b4924514c7e2ea2fcc30b6c751163a8a798ffa5d38c21b4da941e8)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"@sxm-content-creators/tools-ds","ecosystem":"npm","purl":"pkg:npm/%40sxm-content-creators/tools-ds"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"versions":["1.0.1"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"index.cjs","sha256":"ed3b069f22e7825a461a071c42d1f8ee8113c553b6829429e236cf136ca247df","tlsh":"e50186e4d6f004101bf04380f1605903e461ee2b920345427ebc25154f71bb51092ead"}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@sxm-content-creators/tools-ds/MAL-2026-18414.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-x4jx-pc3h-93v6"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@sxm-content-creators/tools-ds"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@sxm-content-creators/tools-ds/v/1.0.1"}],"database_specific":{"iocs":{"files":[{"digests":{"sha256":"68ed5cd24401f8f6838fde935381d6ec6c31e987a4b18d31a9b85b0445989936"},"note":"postinstall runs `node ./index.cjs`, which POSTs hostname, home directory, platform and CI provider to 130.162.231.177:8443 (@sxm-content-creators/tools-ds@1.0.1).","paths":["package.json"],"source":"PACKAGE_ARCHIVE"},{"digests":{"sha256":"ed3b069f22e7825a461a071c42d1f8ee8113c553b6829429e236cf136ca247df"},"note":"Executed by the postinstall script of @sxm-content-creators/tools-ds@1.0.1.","paths":["index.cjs"],"source":"PACKAGE_ARCHIVE"}],"ips":["130.162.231.177"],"urls":["https://130.162.231.177:8443/","https://webhook.site/d730a68c-27bd-4bb5-b1b9-d57a0a4b17ac/semz"]},"malicious-packages-origins":[{"id":"GHSA-x4jx-pc3h-93v6","import_time":"2026-10-30T18:19:43.163273515Z","modified_time":"2026-10-30T18:06:20Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"3413962fd6b4924514c7e2ea2fcc30b6c751163a8a798ffa5d38c21b4da941e8","source":"ghsa-malware"},{"id":"IN-MAL-2026-022647","import_time":"2026-11-12T05:12:52.412793928Z","modified_time":"2026-11-12T05:07:06Z","sha256":"8b05391eed5aeb5b2df6a00ac95ee84f19e08a975532b60137dce712d32d8863","source":"amazon-inspector","versions":["1.0.1"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"InvisiRisk, Inc.","contact":["https://www.invisirisk.com","mailto:research@invisirisk.com"],"type":"FINDER"}]}
|
||||
File diff suppressed because one or more lines are too long
@@ -1 +1 @@
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-18798","published":"2026-11-09T17:47:06Z","modified":"2026-11-11T21:15:15.147508436Z","aliases":["GHSA-2gfg-q28v-5gh9"],"summary":"Malicious code in react-bootstrap-table-next-bg (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (d0196f2878a726d01c33ac3e50ce4d60a66679c39de237ceeace336c525f9451)\nreact-bootstrap-table-next-bg@9.9.9 is a dependency-confusion squat on the react-bootstrap-table-next name, published at an inflated 9.9.9 version to win resolution against internal pins. package.json declares both preinstall and postinstall hooks that run `node beacon.js`, which issues an HTTP GET to the hardcoded bare-IP endpoint http://100.24.177.136/cb with query parameters carrying the installer's hostname, OS username, current working directory, and platform. Installation on any machine that resolves this public name causes those host identifiers to be transmitted in cleartext to the attacker-controlled endpoint, and the lifecycle-script mechanism itself gives the publisher arbitrary code execution on the installer's host at install time.\n\n## Source: ghsa-malware (a11f8ac581f8b8cc2ff1bec698360084c46b97d1dd5ef86e927bdf048d4d9f44)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"react-bootstrap-table-next-bg","ecosystem":"npm","purl":"pkg:npm/react-bootstrap-table-next-bg"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"versions":["9.9.9"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"beacon.js","sha256":"2e0bc5bd9e7cb47a5436401eaf2bfbca19e625217f16194d6611d72ec9e70f78","tlsh":"c20194f97110c7998d4d08e8607f199da0fb73908cd51d80c57cc2c05b704a5261b67b"},{"path":"package.json","sha256":"5ef15dc2653126c70d7e398ffbdd5145b0600ed1a17314ba25ef3f5661f2cada","tlsh":"23d02b45cd007e7324f589ee1836015bb0314f6e23380c4b74f3405c5116aba41a3706"}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/react-bootstrap-table-next-bg/MAL-2026-18798.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-2gfg-q28v-5gh9"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/react-bootstrap-table-next-bg/v/9.9.9"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-2gfg-q28v-5gh9","import_time":"2026-11-09T19:17:53.594331633Z","modified_time":"2026-11-09T17:47:07Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"a11f8ac581f8b8cc2ff1bec698360084c46b97d1dd5ef86e927bdf048d4d9f44","source":"ghsa-malware"},{"id":"IN-MAL-2026-022611","import_time":"2026-11-11T21:05:23.765599296Z","modified_time":"2026-11-11T21:03:39Z","sha256":"d0196f2878a726d01c33ac3e50ce4d60a66679c39de237ceeace336c525f9451","source":"amazon-inspector","versions":["9.9.9"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"}]}
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-18798","published":"2026-11-09T17:47:06Z","modified":"2026-11-12T04:30:04.144861250Z","aliases":["GHSA-2gfg-q28v-5gh9"],"summary":"Malicious code in react-bootstrap-table-next-bg (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (609dc0e005393ea68fb95b497455c8efa31e7bc7f2c207b3852dd3a6c0b2d5bc)\nreact-bootstrap-table-next-bg is a typosquat of react-bootstrap-table-next. Its package.json wires both preinstall and postinstall lifecycle hooks to beacon.js, which on every npm install collects hostname, username, current working directory, platform, INIT_CWD, npm_package_name, and the npm user agent, and sends them via plain HTTP GET to the hardcoded bare-IP collector http://100.24.177.136/cb/c469e93cbb94/depconf/react-bootstrap-table-next-bg. The destination is an unauthenticated IP endpoint unrelated to any legitimate publisher, the transport is cleartext, and the behavior fires automatically on default install without consent. The package self-labels as a 'dependency-confusion PoC', but that label is author-controlled and does not consent for arbitrary installers (including internal builds reached via name confusion) whose host identity and workspace path are shipped to the operator of the bare-IP collector.\n\n## Source: ghsa-malware (a11f8ac581f8b8cc2ff1bec698360084c46b97d1dd5ef86e927bdf048d4d9f44)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"react-bootstrap-table-next-bg","ecosystem":"npm","purl":"pkg:npm/react-bootstrap-table-next-bg"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"versions":["9.9.9","9.9.10"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"beacon.js","sha256":"2e0bc5bd9e7cb47a5436401eaf2bfbca19e625217f16194d6611d72ec9e70f78","tlsh":"c20194f97110c7998d4d08e8607f199da0fb73908cd51d80c57cc2c05b704a5261b67b"},{"path":"package.json","sha256":"5ef15dc2653126c70d7e398ffbdd5145b0600ed1a17314ba25ef3f5661f2cada","tlsh":"23d02b45cd007e7324f589ee1836015bb0314f6e23380c4b74f3405c5116aba41a3706"}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/react-bootstrap-table-next-bg/MAL-2026-18798.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-2gfg-q28v-5gh9"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/react-bootstrap-table-next-bg/v/9.9.9"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/react-bootstrap-table-next-bg/v/9.9.10"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-2gfg-q28v-5gh9","import_time":"2026-11-09T19:17:53.594331633Z","modified_time":"2026-11-09T17:47:07Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"a11f8ac581f8b8cc2ff1bec698360084c46b97d1dd5ef86e927bdf048d4d9f44","source":"ghsa-malware"},{"id":"IN-MAL-2026-022611","import_time":"2026-11-11T21:05:23.765599296Z","modified_time":"2026-11-11T21:03:39Z","sha256":"d0196f2878a726d01c33ac3e50ce4d60a66679c39de237ceeace336c525f9451","source":"amazon-inspector","versions":["9.9.9"]},{"id":"IN-MAL-2026-022645","import_time":"2026-11-12T04:13:27.416821643Z","modified_time":"2026-11-12T04:09:32Z","sha256":"609dc0e005393ea68fb95b497455c8efa31e7bc7f2c207b3852dd3a6c0b2d5bc","source":"amazon-inspector","versions":["9.9.10"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"}]}
|
||||
@@ -1 +1 @@
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-18799","published":"2026-11-09T17:47:06Z","modified":"2026-11-09T19:30:08.321538853Z","aliases":["GHSA-4g97-x239-ch6r"],"summary":"Malicious code in react-bootstrap-table2-toolkit-bg (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (cef5fac5058c556bc407491c506977e99b2bab4d2128b6bdd51d03169cbe89a0)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"react-bootstrap-table2-toolkit-bg","ecosystem":"npm","purl":"pkg:npm/react-bootstrap-table2-toolkit-bg"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/react-bootstrap-table2-toolkit-bg/MAL-2026-18799.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-4g97-x239-ch6r"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-4g97-x239-ch6r","import_time":"2026-11-09T19:17:53.597757805Z","modified_time":"2026-11-09T17:47:07Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"cef5fac5058c556bc407491c506977e99b2bab4d2128b6bdd51d03169cbe89a0","source":"ghsa-malware"}]}}
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-18799","published":"2026-11-09T17:47:06Z","modified":"2026-11-12T04:30:04.116589882Z","aliases":["GHSA-4g97-x239-ch6r"],"summary":"Malicious code in react-bootstrap-table2-toolkit-bg (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (fd7bf70af912ada62496485a2d5bdc063896ef3b4d6783cc459f3808ab151ddf)\nPackage name resembles the popular `react-bootstrap-table2-toolkit` with a `-bg` suffix and is published at version 9.9.9, a shape typically used to win dependency-confusion resolution against internal packages. On `npm install`, a lifecycle script executes beacon code that collects host identifiers via `os.hostname()`, `os.userInfo()`, `process.cwd()`, and `process.platform` and sends them as query parameters in a plain-HTTP GET to the hardcoded bare IP `http://100.24.177.136/cb`. The destination is not a package registry or publisher-matched endpoint, uses an IP literal rather than a domain, and transmits over cleartext HTTP. The manifest description self-labels the package as an authorized dependency-confusion proof-of-concept; such author-controlled labels do not change the behavior, which exfiltrates installer identity to an attacker-controlled endpoint on every install.\n\n## Source: ghsa-malware (cef5fac5058c556bc407491c506977e99b2bab4d2128b6bdd51d03169cbe89a0)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"react-bootstrap-table2-toolkit-bg","ecosystem":"npm","purl":"pkg:npm/react-bootstrap-table2-toolkit-bg"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"versions":["9.9.9"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"beacon.js","sha256":"a7a238b1802dbd1610ab4d9ccd419bb1c383fc8d899fbbcb1945baf3eacb104c","tlsh":"740194f97120c3998d4d08e8647f199da0fb73808cd61d80c47cc2c00b704a5261b63b"},{"path":"package.json","sha256":"89ab24b31f0164eab794cbb7aeed4eddc20efc1b50889473d471f266515a7706","tlsh":"9dd0c289c9107a7724b589ea1836011bb0355f5e22290c5b78f341580116aba01a2706"}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/react-bootstrap-table2-toolkit-bg/MAL-2026-18799.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-4g97-x239-ch6r"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/react-bootstrap-table2-toolkit-bg/v/9.9.9"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-4g97-x239-ch6r","import_time":"2026-11-09T19:17:53.597757805Z","modified_time":"2026-11-09T17:47:07Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"cef5fac5058c556bc407491c506977e99b2bab4d2128b6bdd51d03169cbe89a0","source":"ghsa-malware"},{"id":"IN-MAL-2026-022644","import_time":"2026-11-12T04:13:27.346742174Z","modified_time":"2026-11-12T04:09:25Z","sha256":"fd7bf70af912ada62496485a2d5bdc063896ef3b4d6783cc459f3808ab151ddf","source":"amazon-inspector","versions":["9.9.9"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"}]}
|
||||
@@ -1 +1 @@
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-18801","published":"2026-11-09T17:32:58Z","modified":"2026-11-11T21:15:16.220062644Z","aliases":["GHSA-f6cc-wp5p-cq33"],"summary":"Malicious code in template-pictogram (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (7eb68b10a3e28c16855bcd33931e1fb6e5e997e44d3b25d12b1e11d9c118ec74)\ntemplate-pictogram@9.1.1 is a stub package whose `package.json` main is a Proxy returning no-op functions for every property, with no advertised functionality beyond a shim. Its `postinstall` script runs `beacon.cjs`, which collects hostname, install path, cwd, user-agent, and Node.js version and POSTs them to the hardcoded bare-IP, plain-HTTP endpoint http://13.140.137.222:8787/_ah/dc. The same beacon also fires when the module is `require()`'d. The destination is unrelated to any documented publisher and is reached over cleartext HTTP to a bare IPv4 address.\n\n## Source: ghsa-malware (3841b6d06a61a6dca4677771af04f3a1611aecea70dda90a4672bb4b6f1fc109)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"template-pictogram","ecosystem":"npm","purl":"pkg:npm/template-pictogram"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"versions":["9.1.1"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"beacon.cjs","sha256":"76ac6a6972303785e3f2ffc9e6c50cec29a79b707c3b51cdb3498d11e35df1dc","tlsh":"e8316feba4e0e048aeaa70a8c54f0408b27bf0079501ab50fd5c83959f7193c33fa8dc"},{"path":"index.js","sha256":"a86a4da763bbb34c16f361abe7aab66d5df591b66867ac8160041f932159b08d","tlsh":"2201d0d7225661b10b5221a4978f43c4a3b99d74027941d0d84a9226365108c463b8ee"}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/template-pictogram/MAL-2026-18801.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-f6cc-wp5p-cq33"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/template-pictogram/v/9.1.1"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-f6cc-wp5p-cq33","import_time":"2026-11-09T19:17:53.606405205Z","modified_time":"2026-11-09T17:32:59Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"3841b6d06a61a6dca4677771af04f3a1611aecea70dda90a4672bb4b6f1fc109","source":"ghsa-malware"},{"id":"IN-MAL-2026-022613","import_time":"2026-11-11T21:05:23.910650043Z","modified_time":"2026-11-11T21:04:21Z","sha256":"7eb68b10a3e28c16855bcd33931e1fb6e5e997e44d3b25d12b1e11d9c118ec74","source":"amazon-inspector","versions":["9.1.1"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"}]}
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-18801","published":"2026-11-09T17:32:58Z","modified":"2026-11-12T04:30:04.036072812Z","aliases":["GHSA-f6cc-wp5p-cq33"],"summary":"Malicious code in template-pictogram (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (468486d943cd98b0ff2388a965b8579bf5fb62ab9459802da8381551f9e1660f)\nPackage self-describes as a 'Compatibility shim' but ships no real functionality — its main module exports a Proxy returning no-ops for any property access. The actual payload is beacon.cjs, which runs both from a postinstall hook (`node beacon.cjs`) and on require of index.js, which calls fire() at top level. The beacon POSTs host metadata — os.hostname(), the install __dirname, process.cwd(), and a Node-version-tagged User-Agent — to the hardcoded bare-IP endpoint http://13.140.137.222:8787/_ah/dc over plain HTTP. Shape is consistent with a dependency-confusion or name-squat reconnaissance beacon: install-time callback is the entire purpose of the package, the destination is a bare IP rather than a vendor-identifiable host, and the no-op Proxy main exists only to avoid breaking any accidental resolution.\n\n## Source: ghsa-malware (3841b6d06a61a6dca4677771af04f3a1611aecea70dda90a4672bb4b6f1fc109)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"template-pictogram","ecosystem":"npm","purl":"pkg:npm/template-pictogram"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"versions":["9.1.1","9.1.3"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"beacon.cjs","sha256":"76ac6a6972303785e3f2ffc9e6c50cec29a79b707c3b51cdb3498d11e35df1dc","tlsh":"e8316feba4e0e048aeaa70a8c54f0408b27bf0079501ab50fd5c83959f7193c33fa8dc"},{"path":"index.js","sha256":"a86a4da763bbb34c16f361abe7aab66d5df591b66867ac8160041f932159b08d","tlsh":"2201d0d7225661b10b5221a4978f43c4a3b99d74027941d0d84a9226365108c463b8ee"}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/template-pictogram/MAL-2026-18801.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-f6cc-wp5p-cq33"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/template-pictogram/v/9.1.1"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/template-pictogram/v/9.1.3"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-f6cc-wp5p-cq33","import_time":"2026-11-09T19:17:53.606405205Z","modified_time":"2026-11-09T17:32:59Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"3841b6d06a61a6dca4677771af04f3a1611aecea70dda90a4672bb4b6f1fc109","source":"ghsa-malware"},{"id":"IN-MAL-2026-022613","import_time":"2026-11-11T21:05:23.910650043Z","modified_time":"2026-11-11T21:04:21Z","sha256":"7eb68b10a3e28c16855bcd33931e1fb6e5e997e44d3b25d12b1e11d9c118ec74","source":"amazon-inspector","versions":["9.1.1"]},{"id":"IN-MAL-2026-022646","import_time":"2026-11-12T04:13:27.489763108Z","modified_time":"2026-11-12T04:10:39Z","sha256":"468486d943cd98b0ff2388a965b8579bf5fb62ab9459802da8381551f9e1660f","source":"amazon-inspector","versions":["9.1.3"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-19148","published":"2026-11-12T04:07:58Z","modified":"2026-11-12T04:30:04.082744694Z","summary":"Malicious code in @rfewqa-fes/mnm-doc-mcp (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (0495a09022e152fe8c13b9251497c56e333b58af6e54c412bfd43ff4503be1a7)\npackage.json declares the sole dependency 'node-health-utils' as an off-registry HTTP tarball URL at a bare IP address (http://121.199.24.94/dl/health-utils-1.0.0.tgz) rather than a registry version range. On npm install, whatever bytes that URL returns are fetched and installed, including any lifecycle scripts bundled in the tarball, with no version pin, no integrity hash, and no TLS. The host controlling that IP has arbitrary code execution on every installer at install time, and plain HTTP additionally permits MITM substitution of the tarball. The shipped index.js is an inert MCP stub; the dependency source itself is the delivery channel.\n","affected":[{"package":{"name":"@rfewqa-fes/mnm-doc-mcp","ecosystem":"npm","purl":"pkg:npm/%40rfewqa-fes/mnm-doc-mcp"},"versions":["1.0.0"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"package.json","sha256":"f8ad55746cfac30b0a9401634b2728afc93e6dc20a85c511efd0ed312e466e8d","tlsh":"30e061208371447310c85e61ade61887fff30d7b144478211787111c85a9aad31fc369"}],"package_integrity":[{"filename":"mnm-doc-mcp-1.0.0.tgz","hashes":{"sha1":"f3ad664b487c4041e7e66e5744656ed44e1a6f6a","sha512_sri":"sha512-zg8s9JoxAnma07WRjW0GN3m+tcI7HsSpbGlNNSledcxdKVlErm3SftNRtObx2bcWFLeprndUwG5fpzoSmalsUg=="}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@rfewqa-fes/mnm-doc-mcp/MAL-2026-19148.json"}}],"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/@rfewqa-fes/mnm-doc-mcp/v/1.0.0"}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-022641","import_time":"2026-11-12T04:13:27.145853871Z","modified_time":"2026-11-12T04:07:58Z","sha256":"0495a09022e152fe8c13b9251497c56e333b58af6e54c412bfd43ff4503be1a7","source":"amazon-inspector","versions":["1.0.0"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-19149","published":"2026-11-08T01:30:00Z","modified":"2026-11-12T05:30:08.442829497Z","summary":"Malicious code in superlib_ex3 (npm)","details":"Malicious package. `superlib_ex3` is a multi-stage loader: on install it fetches and executes a second-stage payload from the attacker-controlled host `x.exxcube.fr` (the install hook was observed in dynamic detonation retrieving `https://x.exxcube.fr/postInstall`). No legitimate functionality; all published versions are malicious. Full indicators at the reference below.","affected":[{"package":{"name":"superlib_ex3","ecosystem":"npm","purl":"pkg:npm/superlib_ex3"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/superlib_ex3/MAL-2026-19149.json"}}],"references":[{"type":"WEB","url":"https://wormsign.io/portfolio/superlib_ex3/"}],"database_specific":{"iocs":{"domains":["x.exxcube.fr"],"urls":["https://x.exxcube.fr/postInstall"]}},"credits":[{"name":"wormsign","contact":["https://x.com/w0rmsign"],"type":"FINDER"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-19150","published":"2026-11-06T14:47:15Z","modified":"2026-11-12T05:45:05.989780392Z","summary":"Malicious code in @ruthless-imperium/baileys (npm)","details":"Malicious package. `@ruthless-imperium/baileys` is a trojanized fork of the Baileys WhatsApp library (@whiskeysockets/baileys). it silently subscribes every victim (via the injected WhatsApp newsletter/channel FOLLOW on connect) to attacker-controlled WhatsApp channels — hardcoded newsletter JIDs: 120363399602691477@newsletter, 120363421563597486@newsletter. Legitimate Baileys never hardcodes a channel JID or auto-follows on connect; all published versions are malicious.","affected":[{"package":{"name":"@ruthless-imperium/baileys","ecosystem":"npm","purl":"pkg:npm/%40ruthless-imperium%2Fbaileys"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"versions":["0.0.0-stage","1.0.0","1.0.1","1.0.2","1.0.3"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@ruthless-imperium/baileys/MAL-2026-19150.json"}}],"references":[{"type":"WEB","url":"https://wormsign.io/portfolio/@ruthless-imperium/baileys/"}],"database_specific":{"iocs":{}},"credits":[{"name":"wormsign","contact":["https://x.com/w0rmsign"],"type":"FINDER"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-19151","published":"2026-11-10T05:30:00Z","modified":"2026-11-12T05:45:05.982719323Z","summary":"Malicious code in carboniteapp (npm)","details":"Malicious package. `carboniteapp` runs an install-time script (`node index.js` via its npm install hook) that collects host information, resolves the victim's public IP via api.ipify.org, and exfiltrates the collected data to an attacker-controlled Telegram bot (api.telegram.org). No legitimate functionality; the package exists solely to beacon/exfiltrate on install, so all published versions are malicious. Published 2026-05-06 and removed from npm the same day. Full context at the reference below.","affected":[{"package":{"name":"carboniteapp","ecosystem":"npm","purl":"pkg:npm/carboniteapp"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/carboniteapp/MAL-2026-19151.json"}}],"references":[{"type":"WEB","url":"https://wormsign.io/portfolio/carboniteapp/"}],"database_specific":{"iocs":{}},"credits":[{"name":"wormsign","contact":["https://x.com/w0rmsign"],"type":"FINDER"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-19152","published":"2026-11-03T14:15:37Z","modified":"2026-11-12T05:45:05.984658265Z","summary":"Malicious code in @ndikagantengg/baileys (npm)","details":"Malicious package. `@ndikagantengg/baileys` is a trojanized fork of the Baileys WhatsApp library (@whiskeysockets/baileys). it silently subscribes every victim (via the injected WhatsApp newsletter/channel FOLLOW on connect) to attacker-controlled WhatsApp channels — hardcoded newsletter JIDs: 120363428626908481@newsletter. Legitimate Baileys never hardcodes a channel JID or auto-follows on connect; all published versions are malicious.","affected":[{"package":{"name":"@ndikagantengg/baileys","ecosystem":"npm","purl":"pkg:npm/%40ndikagantengg%2Fbaileys"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"versions":["7.0.1","7.0.2","7.0.3","7.0.4","7.0.5","7.0.6","7.0.7"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@ndikagantengg/baileys/MAL-2026-19152.json"}}],"references":[{"type":"WEB","url":"https://wormsign.io/portfolio/@ndikagantengg/baileys/"}],"database_specific":{"iocs":{}},"credits":[{"name":"wormsign","contact":["https://x.com/w0rmsign"],"type":"FINDER"}]}
|
||||
Reference in New Issue
Block a user