vuln-osv update 2026-11-12T06:43:41Z
This commit is contained in:
Vulnerability Bot
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
@@ -1 +1 @@
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-18435","published":"2026-11-01T08:01:23Z","modified":"2026-11-01T09:45:03.305960502Z","summary":"Malicious code in privacypass-py (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (0ca6e88317dac5ec524d2dc6ec4b2af7934e2213569ed7c8a757e59edb45b0c3)\nThe package presents itself as 'Privacy Pass client primitives' but ships no cryptographic functionality. Its only runtime effect is a data-exfiltration beacon. setup.py invokes a `_report()` routine during build/install that collects hostname, username, current working directory, argv, the parent process command line read from /proc/<ppid>/cmdline, and environment variable names and values matching credential-related prefixes (AWS_, GITHUB_, PIP_, and others), then POSTs the JSON payload to the hardcoded bare-IP endpoint http://85.190.112.236:8881/b/<nonce> over plain HTTP. privacypass_py/__init__.py repeats the same beacon at module top level, calling `_report('import')` on every `import privacypass_py` with an expanded prefix list (CLOUDFLARE_, SUPERTOKENS, HOME, USER, PATH) and an additional `secretish_names` list filtered by substrings KEY/SECRET/TOKEN/PASS/CRED/PRIVATE/SEED/MNEMONIC/SIGNATURE/COOKIE/SESSION/AUTH, sent to http://85.190.112.236:8881/f/<nonce>. The import-time path fires outside pip build isolation. The name and description function as cover for a package whose only shipped code is the beacon.\n\n## Source: kam193 (1c4699b191565636c74fc5e6e8ece237bb0186ca11f021298ac91b2931756c09)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n","affected":[{"package":{"name":"privacypass-py","ecosystem":"PyPI","purl":"pkg:pypi/privacypass-py"},"versions":["0.1.101","0.1.99","0.1.100"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"setup.py","sha256":"cea0614f670c026bcdd5bc600a13e5463c28d46412c242cd38739bcfee596810","tlsh":"9f415490ef227c7282d605096828459473bab90f2aa17474f6de23752f9e03982f3e56"},{"path":"privacypass_py/__init__.py","sha256":"4862a75e16b2e466f28ba5d71ee6097729502ac5e9294ebbdd0f069004ff5c96","tlsh":"f7515290ed229d33c29f411e2c1448e0333af40f36556535bacd2678af9d02d52f2d9a"}],"package_integrity":[{"filename":"privacypass_py-0.1.101.tar.gz","hashes":{"blake2b_256":"29851396f302ddcb3f730480a1de58a24b39982843a6aed068c33011cd3fd35e","md5":"e6c7c197293a5ae366da64052d704a35","sha256":"2427b1b03b2bdb8deab5d0d3d56273e462c59ff0d64f3134ff128745d69ecff3"}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/privacypass-py/MAL-2026-18435.json"}}],"references":[{"type":"PACKAGE","url":"https://pypi.org/project/privacypass-py/0.1.101/"},{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/privacypass-py"}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-022471","import_time":"2026-11-01T08:14:47.241746113Z","modified_time":"2026-11-01T08:01:23Z","sha256":"0ca6e88317dac5ec524d2dc6ec4b2af7934e2213569ed7c8a757e59edb45b0c3","source":"amazon-inspector","versions":["0.1.101"]},{"id":"pypi/GENERIC-standard-pypi-install-pentest/privacypass-py","import_time":"2026-11-01T09:35:59.414959083Z","modified_time":"2026-11-01T09:03:03.776904Z","sha256":"1c4699b191565636c74fc5e6e8ece237bb0186ca11f021298ac91b2931756c09","source":"kam193","versions":["0.1.99","0.1.100","0.1.101"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-18435","published":"2026-11-01T08:01:23Z","modified":"2026-11-12T03:45:03.273800640Z","summary":"Malicious code in privacypass-py (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (0ca6e88317dac5ec524d2dc6ec4b2af7934e2213569ed7c8a757e59edb45b0c3)\nThe package presents itself as 'Privacy Pass client primitives' but ships no cryptographic functionality. Its only runtime effect is a data-exfiltration beacon. setup.py invokes a `_report()` routine during build/install that collects hostname, username, current working directory, argv, the parent process command line read from /proc/<ppid>/cmdline, and environment variable names and values matching credential-related prefixes (AWS_, GITHUB_, PIP_, and others), then POSTs the JSON payload to the hardcoded bare-IP endpoint http://85.190.112.236:8881/b/<nonce> over plain HTTP. privacypass_py/__init__.py repeats the same beacon at module top level, calling `_report('import')` on every `import privacypass_py` with an expanded prefix list (CLOUDFLARE_, SUPERTOKENS, HOME, USER, PATH) and an additional `secretish_names` list filtered by substrings KEY/SECRET/TOKEN/PASS/CRED/PRIVATE/SEED/MNEMONIC/SIGNATURE/COOKIE/SESSION/AUTH, sent to http://85.190.112.236:8881/f/<nonce>. The import-time path fires outside pip build isolation. The name and description function as cover for a package whose only shipped code is the beacon.\n\n## Source: kam193 (1c4699b191565636c74fc5e6e8ece237bb0186ca11f021298ac91b2931756c09)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n","affected":[{"package":{"name":"privacypass-py","ecosystem":"PyPI","purl":"pkg:pypi/privacypass-py"},"versions":["0.1.101","0.1.99","0.1.100"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"setup.py","sha256":"cea0614f670c026bcdd5bc600a13e5463c28d46412c242cd38739bcfee596810","tlsh":"9f415490ef227c7282d605096828459473bab90f2aa17474f6de23752f9e03982f3e56"},{"path":"privacypass_py/__init__.py","sha256":"4862a75e16b2e466f28ba5d71ee6097729502ac5e9294ebbdd0f069004ff5c96","tlsh":"f7515290ed229d33c29f411e2c1448e0333af40f36556535bacd2678af9d02d52f2d9a"}],"package_integrity":[{"filename":"privacypass_py-0.1.101.tar.gz","hashes":{"blake2b_256":"29851396f302ddcb3f730480a1de58a24b39982843a6aed068c33011cd3fd35e","md5":"e6c7c197293a5ae366da64052d704a35","sha256":"2427b1b03b2bdb8deab5d0d3d56273e462c59ff0d64f3134ff128745d69ecff3"}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/privacypass-py/MAL-2026-18435.json"}}],"references":[{"type":"PACKAGE","url":"https://pypi.org/project/privacypass-py/0.1.101/"},{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/privacypass-py"},{"type":"PACKAGE","url":"https://pypi.org/project/privacypass-py/0.1.100/"}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-022471","import_time":"2026-11-01T08:14:47.241746113Z","modified_time":"2026-11-01T08:01:23Z","sha256":"0ca6e88317dac5ec524d2dc6ec4b2af7934e2213569ed7c8a757e59edb45b0c3","source":"amazon-inspector","versions":["0.1.101"]},{"id":"pypi/GENERIC-standard-pypi-install-pentest/privacypass-py","import_time":"2026-11-01T09:35:59.414959083Z","modified_time":"2026-11-01T09:03:03.776904Z","sha256":"1c4699b191565636c74fc5e6e8ece237bb0186ca11f021298ac91b2931756c09","source":"kam193","versions":["0.1.99","0.1.100","0.1.101"]},{"id":"IN-MAL-2026-022637","import_time":"2026-11-12T03:36:56.520042856Z","modified_time":"2026-11-12T03:35:50Z","sha256":"43b30cafa942acc32671e02709b88db00fab4a68602979f1509bd4d69dfadeab","source":"amazon-inspector","versions":["0.1.100"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}
|
||||
@@ -1 +1 @@
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-18490","published":"2026-11-02T22:11:26Z","modified":"2026-11-02T23:15:02.874644797Z","summary":"Malicious code in pyprig (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (11f4beddcb42e2348d31d2ef0605d72198a28e796467c8afbac5c5c30d870315)\nClone of a legitimate Pydantic package with the added downloading of a remote code. The remote code is delivered from the GitHub repository and unpacked as a new module and then called during initialization of any models (runner injected into cloned Pydantic code). During analysis, the remote code was just a placeholder.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-11-pyprig\n\n\nReasons (based on the campaign):\n\n\n - Downloads and executes a remote malicious script.\n\n\n - clones-real-package\n","affected":[{"package":{"name":"pyprig","ecosystem":"PyPI","purl":"pkg:pypi/pyprig"},"versions":["1.2.0","1.2.1","1.2.2"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/pyprig/MAL-2026-18490.json"}}],"references":[{"type":"WEB","url":"https://github.com/PyPrig/pyprig-validation-toolkit"},{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/pyprig"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/2026-11-pyprig/pyprig","import_time":"2026-11-02T23:10:57.383268222Z","modified_time":"2026-11-02T22:11:26.957755Z","sha256":"11f4beddcb42e2348d31d2ef0605d72198a28e796467c8afbac5c5c30d870315","source":"kam193","versions":["1.2.0","1.2.1","1.2.2"]}]},"credits":[{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-18490","published":"2026-11-02T22:11:26Z","modified":"2026-11-12T04:30:04.152916010Z","summary":"Malicious code in pyprig (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (83ccb335aa01c8a31acb208aa2f1c2654ab010f9f3cc29fd2f1e6f60a44113f8)\npyprig impersonates pydantic: the package name, description ('Data validation using Python type hints'), and README are near-verbatim clones of pydantic, and pyproject.toml lists pydantic's real maintainers (Samuel Colvin, Eric Jolibois, Hasan Ramezani, David Hewitt, et al.) as authors. The top-level pyprig/__init__.py unconditionally calls get_help() from pyprig/help.py on every import. get_help() downloads https://github.com/PyPrig/pyprig-help/archive/refs/heads/main.zip from the mutable main branch with no commit pin and no hash or signature verification, then extracts the archive into the installed package tree at <site-packages>/pyprig/help/ via archive.extractall followed by shutil.copytree into HELP_DIR = PACKAGE_DIR / 'help'. Because the files land inside the Python package directory, whoever controls the PyPrig/pyprig-help repository can replace them at any time to stage Python files that are then importable from within the package, giving arbitrary code execution on any machine that imports pyprig after the swap.\n\n## Source: kam193 (11f4beddcb42e2348d31d2ef0605d72198a28e796467c8afbac5c5c30d870315)\nClone of a legitimate Pydantic package with the added downloading of a remote code. The remote code is delivered from the GitHub repository and unpacked as a new module and then called during initialization of any models (runner injected into cloned Pydantic code). During analysis, the remote code was just a placeholder.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-11-pyprig\n\n\nReasons (based on the campaign):\n\n\n - Downloads and executes a remote malicious script.\n\n\n - clones-real-package\n","affected":[{"package":{"name":"pyprig","ecosystem":"PyPI","purl":"pkg:pypi/pyprig"},"versions":["1.2.0","1.2.1","1.2.2"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"pyprig/help.py","sha256":"faf8ee4f5fa421e08ccc4a38349cdc4c938b04887fba173aeca33497db31ee3c","tlsh":"9a411f534c93319091b8e50c5ed59497f323f1c32ebb58a336bc5f642fb0ad1a2e9289"},{"path":"pyproject.toml","sha256":"8cecd88a3bf9b539fbd0153d872772a0ec6b6615ade8332513f318cb03c49889","tlsh":"d202b6b394fb11b72a8b5513d1ac4e4257246073ee82b5a8bdec85885fcceadc1b1138"}],"package_integrity":[{"filename":"pyprig-1.2.1-py3-none-any.whl","hashes":{"blake2b_256":"46f7103e59c83d57032c7de914561a40c79e7fb9d03d4b3caa5f0f6bdcd91744","md5":"d8546bf9f83687c9d153165cbeb5f072","sha256":"700038278fe5e82f7ba5e2833ea578c6b7441f7b9368f0fbef5a6491b835a81f"}},{"filename":"pyprig-1.2.1.tar.gz","hashes":{"blake2b_256":"f35f97c643ac0a5fdf85b73ff94ab380a34663ad7f65d8df37ed79d8517cb892","md5":"e427ad9010e761f2cb90809b257682d3","sha256":"74a0ff110c95245ad491eba59bc417f7fbf8ad0cf234d2be5124a4970de1b438"}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/pyprig/MAL-2026-18490.json"}}],"references":[{"type":"WEB","url":"https://github.com/PyPrig/pyprig-validation-toolkit"},{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/pyprig"},{"type":"PACKAGE","url":"https://pypi.org/project/pyprig/1.2.1/"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/2026-11-pyprig/pyprig","import_time":"2026-11-02T23:10:57.383268222Z","modified_time":"2026-11-02T22:11:26.957755Z","sha256":"11f4beddcb42e2348d31d2ef0605d72198a28e796467c8afbac5c5c30d870315","source":"kam193","versions":["1.2.0","1.2.1","1.2.2"]},{"id":"IN-MAL-2026-022640","import_time":"2026-11-12T04:13:27.083157068Z","modified_time":"2026-11-12T03:39:49Z","sha256":"83ccb335aa01c8a31acb208aa2f1c2654ab010f9f3cc29fd2f1e6f60a44113f8","source":"amazon-inspector","versions":["1.2.1"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}
|
||||
@@ -1 +1 @@
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-18627","published":"2026-11-04T16:11:42Z","modified":"2026-11-04T16:45:04.332052887Z","summary":"Malicious code in msgpackrpc (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (9747a902bd61a745ec9c8f569f57417303f828b441c3e4e8c95101adf1498d13)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n","affected":[{"package":{"name":"msgpackrpc","ecosystem":"PyPI","purl":"pkg:pypi/msgpackrpc"},"versions":["0.0.0","0.1.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/msgpackrpc/MAL-2026-18627.json"}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/msgpackrpc"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/GENERIC-standard-pypi-install-pentest/msgpackrpc","import_time":"2026-11-04T16:37:36.802736375Z","modified_time":"2026-11-04T16:11:42.068096Z","sha256":"9747a902bd61a745ec9c8f569f57417303f828b441c3e4e8c95101adf1498d13","source":"kam193","versions":["0.0.0","0.1.0"]}]},"credits":[{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-18627","published":"2026-11-04T16:11:42Z","modified":"2026-11-12T00:45:06.780823829Z","summary":"Malicious code in msgpackrpc (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (55c4f419c883d30c0099a7120b0456d975af824e08310e0750166d074def3204)\nThe sdist's setup.py overrides the install command with a class that, during `pip install`, collects the installer's hostname via socket.gethostname() and resolves its IP via socket.gethostbyname(), then POSTs them as JSON to a hardcoded webhook.site collector URL (https://webhook.site/711f31ae-7091-4b68-9631-57b6c6f19980) using urllib.request.urlopen. The package ships no actual functionality: msgpackrpc/__init__.py is empty, the project metadata self-describes as a 'POC package (beacon-only)', and the author field is the placeholder 'Your Name'. The package name is a typosquat shape against the legitimate msgpack-rpc ecosystem. Installing this version causes the installer's host identifiers to leave the machine to an attacker-controlled endpoint with no disclosure or consent.\n\n## Source: kam193 (9747a902bd61a745ec9c8f569f57417303f828b441c3e4e8c95101adf1498d13)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n","affected":[{"package":{"name":"msgpackrpc","ecosystem":"PyPI","purl":"pkg:pypi/msgpackrpc"},"versions":["0.0.0","0.1.0"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"artifacts":["msgpackrpc-0.1.0.tar.gz"],"path":"setup.py","sha256":"5e3b5827437a8bd3649abf9f1df6957904acb8eff37c4b217f35777ce1a329ce","tlsh":"7e11ef92f872b165bb8321d0086789653693ba0bbb02ec6d3dcc43584fae439d861658"},{"artifacts":["msgpackrpc-0.1.0.tar.gz"],"path":"pyproject.toml","sha256":"e6d8a6e833ab20a03d2d5646688bf639eb21d6ec3a11362207ade35eac9c0188","tlsh":"d3e07d23cbb7db40adc210412019b484debaf45531c081485fcbc1c5a5cd48acbde824"}],"package_integrity":[{"filename":"msgpackrpc-0.1.0.tar.gz","hashes":{"blake2b_256":"889692f8afddd60dbe93c6700f6aacc245b4a5aea74686acfadc959f757c6792","md5":"64a7bb442d523e701f9e9c0a000ade16","sha256":"3d959a9588a3fb96d4a558484dca090c4d3a42a6bdbb8d38882bda9ef7a7c4da"}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/msgpackrpc/MAL-2026-18627.json"}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/msgpackrpc"},{"type":"PACKAGE","url":"https://pypi.org/project/msgpackrpc/0.1.0/"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/GENERIC-standard-pypi-install-pentest/msgpackrpc","import_time":"2026-11-04T16:37:36.802736375Z","modified_time":"2026-11-04T16:11:42.068096Z","sha256":"9747a902bd61a745ec9c8f569f57417303f828b441c3e4e8c95101adf1498d13","source":"kam193","versions":["0.0.0","0.1.0"]},{"id":"IN-MAL-2026-022626","import_time":"2026-11-12T00:30:24.934663162Z","modified_time":"2026-11-11T23:47:58Z","sha256":"55c4f419c883d30c0099a7120b0456d975af824e08310e0750166d074def3204","source":"amazon-inspector","versions":["0.1.0"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}
|
||||
File diff suppressed because one or more lines are too long
@@ -1 +1 @@
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-18746","published":"2026-11-07T08:32:18Z","modified":"2026-11-07T08:45:03.213207645Z","summary":"Malicious code in genblaze-fal (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (253796cb8693d039c09267f3d6d398031e3ad27640bb70f21f2e75d2578be649)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n","affected":[{"package":{"name":"genblaze-fal","ecosystem":"PyPI","purl":"pkg:pypi/genblaze-fal"},"versions":["0.1.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/genblaze-fal/MAL-2026-18746.json"}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/genblaze-fal"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/GENERIC-standard-pypi-install-pentest/genblaze-fal","import_time":"2026-11-07T08:36:36.403321334Z","modified_time":"2026-11-07T08:32:18.92264Z","sha256":"253796cb8693d039c09267f3d6d398031e3ad27640bb70f21f2e75d2578be649","source":"kam193","versions":["0.1.0"]}]},"credits":[{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-18746","published":"2026-11-07T08:32:18Z","modified":"2026-11-12T03:45:03.293519056Z","summary":"Malicious code in genblaze-fal (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (8a271155be7da40cba43376d6a085b75a96c0bb9fed885c421424bc42fd8d07b)\nsetup.py defines custom build_py and install cmdclasses that, on sdist build and install, POST a JSON payload containing the installer's hostname, current working directory, install path, Python version, and a timestamp to the hardcoded bare-IP URL http://13.140.137.222:8787/_ah/dc over plain HTTP. The destination is a bare IPv4 address on a non-standard port with no TLS and no relation to any declared publisher domain. A source-code comment labels the behavior an 'authorized dependency-confusion canary', but the package is published on public PyPI where any installer who resolves this name will transmit their host identifiers to that endpoint. The sdist is the only distribution file and auto-executes on default pip install for every listed platform.\n\n## Source: kam193 (253796cb8693d039c09267f3d6d398031e3ad27640bb70f21f2e75d2578be649)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n","affected":[{"package":{"name":"genblaze-fal","ecosystem":"PyPI","purl":"pkg:pypi/genblaze-fal"},"versions":["0.1.0"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"artifacts":["genblaze_fal-0.1.0.tar.gz"],"path":"setup.py","sha256":"a9ba1e323ebfe7804887462cae68afed20996aa58049e9f8286940031900c40a","tlsh":"2b418660c92609787ecb41a5a8fb66947332ba272d40bc9578cd07481f0f0ff89b72c5"}],"package_integrity":[{"filename":"genblaze_fal-0.1.0.tar.gz","hashes":{"blake2b_256":"14f156c083988e29272500c0dd47e8c55d765925740c4d9fa8555876b303bb20","md5":"e1c3bc03bb78e4b7ef71ab5c9c4b99b5","sha256":"ac4c445f1701dd9a99150129ab196e77ad207d1295c99d6dc95b01636b88d454"}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/genblaze-fal/MAL-2026-18746.json"}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/genblaze-fal"},{"type":"PACKAGE","url":"https://pypi.org/project/genblaze-fal/0.1.0/"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/GENERIC-standard-pypi-install-pentest/genblaze-fal","import_time":"2026-11-07T08:36:36.403321334Z","modified_time":"2026-11-07T08:32:18.92264Z","sha256":"253796cb8693d039c09267f3d6d398031e3ad27640bb70f21f2e75d2578be649","source":"kam193","versions":["0.1.0"]},{"id":"IN-MAL-2026-022627","import_time":"2026-11-12T03:36:56.209736663Z","modified_time":"2026-11-12T03:31:54Z","sha256":"8a271155be7da40cba43376d6a085b75a96c0bb9fed885c421424bc42fd8d07b","source":"amazon-inspector","versions":["0.1.0"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}
|
||||
@@ -1 +1 @@
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-18747","published":"2026-11-07T08:34:31Z","modified":"2026-11-07T09:15:03.145542032Z","summary":"Malicious code in genblaze-atlascloud (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (c8d0787ea4049d0bb0321d1b25591f303ee2a5d5351aeb725a67250d0ddf4188)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n","affected":[{"package":{"name":"genblaze-atlascloud","ecosystem":"PyPI","purl":"pkg:pypi/genblaze-atlascloud"},"versions":["0.1.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/genblaze-atlascloud/MAL-2026-18747.json"}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/genblaze-atlascloud"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/GENERIC-standard-pypi-install-pentest/genblaze-atlascloud","import_time":"2026-11-07T09:11:45.278379612Z","modified_time":"2026-11-07T08:34:31.241966Z","sha256":"c8d0787ea4049d0bb0321d1b25591f303ee2a5d5351aeb725a67250d0ddf4188","source":"kam193","versions":["0.1.0"]}]},"credits":[{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-18747","published":"2026-11-07T08:34:31Z","modified":"2026-11-12T03:45:03.294926426Z","summary":"Malicious code in genblaze-atlascloud (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (6279c5d7cd957549bcecd8c2e4aa1377bf53c114341a3350a23464de6e18bad9)\nsetup.py registers custom build_py and install cmdclasses that, on every `pip install` or sdist build, POST a JSON payload containing socket.gethostname(), the install path, os.getcwd(), the Python version, and a canary identifier to the hardcoded bare-IP endpoint http://13.140.137.222:8787/_ah/dc over plain HTTP. The destination is a non-publisher bare IP, there is no opt-in, and the package name resembles an internal vendor name, so any environment whose internal dependency resolves to this public name has host and path identifiers transmitted off-host at install time. The long_description self-labels this as an 'authorized dependency-confusion canary' targeting Backblaze/Bugcrowd, but the exfiltration mechanism is identical to a hostile dependency-confusion payload and the authorization claim is author-controlled text that an installer cannot verify at install time.\n\n## Source: kam193 (c8d0787ea4049d0bb0321d1b25591f303ee2a5d5351aeb725a67250d0ddf4188)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n","affected":[{"package":{"name":"genblaze-atlascloud","ecosystem":"PyPI","purl":"pkg:pypi/genblaze-atlascloud"},"versions":["0.1.0"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"artifacts":["genblaze_atlascloud-0.1.0.tar.gz"],"path":"setup.py","sha256":"2fa7b8d44c0523e237e79a3ebf0dc4f8e3a94dafe9d2ec1cbc0ccf7fd6e58d19","tlsh":"25419671c92209783ecb41a998f756506332ea271d41bc95b8cd07481f0f0ff89b71c1"}],"package_integrity":[{"filename":"genblaze_atlascloud-0.1.0.tar.gz","hashes":{"blake2b_256":"69b1dd23d9743b78fdd11627101ce24aef63829c0f43e3ad73325516e52f266d","md5":"9afee767843f9394f99104a7e502dbba","sha256":"bdac6b1140ac33683d52641e6031ab5b6263dabb4d74eee373d1d1b32c4a9633"}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/genblaze-atlascloud/MAL-2026-18747.json"}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/genblaze-atlascloud"},{"type":"PACKAGE","url":"https://pypi.org/project/genblaze-atlascloud/0.1.0/"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/GENERIC-standard-pypi-install-pentest/genblaze-atlascloud","import_time":"2026-11-07T09:11:45.278379612Z","modified_time":"2026-11-07T08:34:31.241966Z","sha256":"c8d0787ea4049d0bb0321d1b25591f303ee2a5d5351aeb725a67250d0ddf4188","source":"kam193","versions":["0.1.0"]},{"id":"IN-MAL-2026-022628","import_time":"2026-11-12T03:36:56.256874897Z","modified_time":"2026-11-12T03:33:44Z","sha256":"6279c5d7cd957549bcecd8c2e4aa1377bf53c114341a3350a23464de6e18bad9","source":"amazon-inspector","versions":["0.1.0"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}
|
||||
@@ -1 +1 @@
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-18769","published":"2026-11-08T13:51:47Z","modified":"2026-11-08T14:15:05.147670216Z","summary":"Malicious code in lookuptest11 (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (fe5cc784eb96a4025bcd45731fcb19c3826a122a02ec4fed1cbee875fa2ca98b)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n","affected":[{"package":{"name":"lookuptest11","ecosystem":"PyPI","purl":"pkg:pypi/lookuptest11"},"versions":["0.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/lookuptest11/MAL-2026-18769.json"}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/lookuptest11"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/GENERIC-standard-pypi-install-pentest/lookuptest11","import_time":"2026-11-08T14:10:37.569263977Z","modified_time":"2026-11-08T13:51:47.432846Z","sha256":"fe5cc784eb96a4025bcd45731fcb19c3826a122a02ec4fed1cbee875fa2ca98b","source":"kam193","versions":["0.0.1"]}]},"credits":[{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-18769","published":"2026-11-08T13:51:47Z","modified":"2026-11-12T00:45:06.791373992Z","summary":"Malicious code in lookuptest11 (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (5e9ac24971ad447f0248f201416c1921ca268ddb73ad057eee44eaf4868efb17)\nlookuptest11 0.0.1 performs DNS-based exfiltration of installer identity to the attacker-controlled domain testa213022.dssldrf.net. setup.py constructs a subdomain label of the form install-<random>-<hostname> from platform.node() and calls socket.getaddrinfo(label.testa213022.dssldrf.net, 80), causing the authoritative nameserver for that domain to receive the installer's hostname on every sdist build. gcp_log_poc/__init__.py performs the equivalent lookup with an import-<random>-<hostname> label at module load, so the same leak fires on every import of the installed wheel. The package exposes no functional API consistent with its name; the DNS calls are the only observable behavior and have no build or runtime purpose other than delivering host identifiers to the operator of testa213022.dssldrf.net.\n\n## Source: kam193 (fe5cc784eb96a4025bcd45731fcb19c3826a122a02ec4fed1cbee875fa2ca98b)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n","affected":[{"package":{"name":"lookuptest11","ecosystem":"PyPI","purl":"pkg:pypi/lookuptest11"},"versions":["0.0.1"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"artifacts":["lookuptest11-0.0.1.tar.gz"],"path":"setup.py","sha256":"3ccf00a87011bd3d73996310920d3ed92e43ac1c9f620b6eab83da6b18a6a023","tlsh":"8ce06a02c7339c5319a0168904f520b14f3f46133f32144d77c503205f9f05a8436617"},{"artifacts":["lookuptest11-0.0.1.tar.gz","lookuptest11-0.0.1-py3-none-any.whl"],"path":"gcp_log_poc/__init__.py","sha256":"4f4433d1b9b0dfe50d840daa089f6e931b6e984b1f9dc41fc41fa80a8299137e","tlsh":"0cd02b07e3b59c43a66222c700e871719e7f81026f2a1c6e69991b91cfaa4649535b54"}],"package_integrity":[{"filename":"lookuptest11-0.0.1-py3-none-any.whl","hashes":{"blake2b_256":"b173948ea61f9b3013a0f9f775a3909487f7dddf425d2fc916d08ce883a74867","md5":"f6e29412b0dc4d937f1e847cbbdec816","sha256":"74173d4860dfe393aa6a45e3382eb2075df92ccfb194fedfac3b7c2539038765"}},{"filename":"lookuptest11-0.0.1.tar.gz","hashes":{"blake2b_256":"feecdc8d300614c7199e8579ae2861b17f8f522a8693aa9d392fe3ce29d3858a","md5":"c6a2113b43e9c62773c6d4e62dc0d515","sha256":"c8874aaaf0544cf5207f3de9a19611e3d9e5ef1657747e20b69e1d7354df628c"}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/lookuptest11/MAL-2026-18769.json"}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/lookuptest11"},{"type":"PACKAGE","url":"https://pypi.org/project/lookuptest11/0.0.1/"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/GENERIC-standard-pypi-install-pentest/lookuptest11","import_time":"2026-11-08T14:10:37.569263977Z","modified_time":"2026-11-08T13:51:47.432846Z","sha256":"fe5cc784eb96a4025bcd45731fcb19c3826a122a02ec4fed1cbee875fa2ca98b","source":"kam193","versions":["0.0.1"]},{"id":"IN-MAL-2026-022624","import_time":"2026-11-12T00:30:24.653151672Z","modified_time":"2026-11-11T23:47:12Z","sha256":"5e9ac24971ad447f0248f201416c1921ca268ddb73ad057eee44eaf4868efb17","source":"amazon-inspector","versions":["0.0.1"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}
|
||||
@@ -1 +1 @@
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-18772","published":"2026-11-08T21:45:25Z","modified":"2026-11-08T22:45:03.359292162Z","summary":"Malicious code in parseyaml (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (21f0c643e1ed1b11c56bfdd5f7567b2c0172924c227206b8ab9e4210918c6ee3)\nIn this campaign, remote code is executed via a dependency pretending to be a YAML loader but embedding a special loader executing code from a provided file. During analysis, the code was just a stub.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-11-parseyaml\n\n\nReasons (based on the campaign):\n\n\n - The malicious code is intentionally included in a dependency of the package\n\n\n - Downloads and executes a remote malicious script.\n","affected":[{"package":{"name":"parseyaml","ecosystem":"PyPI","purl":"pkg:pypi/parseyaml"},"versions":["1.2.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/parseyaml/MAL-2026-18772.json"}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/parseyaml"}],"database_specific":{"iocs":{"urls":["https://plainraw.com/raw/99b69bda4246"]},"malicious-packages-origins":[{"id":"pypi/2026-11-parseyaml/parseyaml","import_time":"2026-11-08T22:36:34.682518859Z","modified_time":"2026-11-08T21:45:25.933688Z","sha256":"21f0c643e1ed1b11c56bfdd5f7567b2c0172924c227206b8ab9e4210918c6ee3","source":"kam193","versions":["1.2.0"]}]},"credits":[{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-18772","published":"2026-11-08T21:45:25Z","modified":"2026-11-12T03:45:03.276981731Z","summary":"Malicious code in parseyaml (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (42b56cbea8e7b46f2ad7dc1d59334a45862f50366944ee198e97c68a313681ef)\nparseyaml 1.2.0 advertises itself as a PyYAML wrapper whose `safe_load`, `load(loader=\"safe\")`, `load(loader=\"full\")`, and `load(loader=\"base\")` entry points return only basic YAML types. The implementation defines `_LOADERS = {\"default\": UnsafePyLoader, \"safe\": UnsafePyLoader, \"full\": UnsafePyLoader, \"base\": UnsafePyLoader, \"unsafe_py\": UnsafePyLoader}`, so every documented safe-loader name resolves to `UnsafePyLoader`. `UnsafePyLoader` registers a `!py` tag constructor (`_unsafe_py_constructor`) that calls `exec(code, {})` on the scalar body of the tag. Any caller that follows the package's own documentation and feeds attacker-supplied YAML containing a `!py` tag through what it believes is a safe loader will execute attacker-controlled Python in the host process. The exec sink is hidden inside loader names explicitly promised to be safe for untrusted input, which is a backdoor built into the advertised safe API rather than a documented unsafe option.\n\n## Source: kam193 (21f0c643e1ed1b11c56bfdd5f7567b2c0172924c227206b8ab9e4210918c6ee3)\nIn this campaign, remote code is executed via a dependency pretending to be a YAML loader but embedding a special loader executing code from a provided file. During analysis, the code was just a stub.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-11-parseyaml\n\n\nReasons (based on the campaign):\n\n\n - The malicious code is intentionally included in a dependency of the package\n\n\n - Downloads and executes a remote malicious script.\n","affected":[{"package":{"name":"parseyaml","ecosystem":"PyPI","purl":"pkg:pypi/parseyaml"},"versions":["1.2.0"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"artifacts":["parseyaml-1.2.0.tar.gz","parseyaml-1.2.0-py3-none-any.whl"],"path":"parseyaml/core.py","sha256":"acac40be1b8b623d2780ca0107d1496cc6840aff82fc1fafe714f8820ec840a9","tlsh":"acd13543e650ed924740deb5691afe42ada8bf470d0075b5bcacc12c9fda0adf0b45d8"}],"package_integrity":[{"filename":"parseyaml-1.2.0-py3-none-any.whl","hashes":{"blake2b_256":"c9d370fc0dcf046594bd36afa695732e0312c3e98eeb27fc7e4e3b9be4a57edf","md5":"9c8cbae2e8005002dcb2e11ee460b060","sha256":"9fe4bb1b97e5945c3d291465e32b325c3fbb0f0a50c92f9e925831296a47898d"}},{"filename":"parseyaml-1.2.0.tar.gz","hashes":{"blake2b_256":"6ba29e013de73cccde58773a53a842aaff7d685dd05134cc08754846710fe5b0","md5":"0060d69225b4f6d44cadc1a06c29b224","sha256":"5fe6da25a8b07825af947a478e9ce783386ce9504d8870c96a9e03aa284c405e"}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/parseyaml/MAL-2026-18772.json"}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/parseyaml"},{"type":"PACKAGE","url":"https://pypi.org/project/parseyaml/1.2.0/"}],"database_specific":{"iocs":{"urls":["https://plainraw.com/raw/99b69bda4246"]},"malicious-packages-origins":[{"id":"pypi/2026-11-parseyaml/parseyaml","import_time":"2026-11-08T22:36:34.682518859Z","modified_time":"2026-11-08T21:45:25.933688Z","sha256":"21f0c643e1ed1b11c56bfdd5f7567b2c0172924c227206b8ab9e4210918c6ee3","source":"kam193","versions":["1.2.0"]},{"id":"IN-MAL-2026-022636","import_time":"2026-11-12T03:36:56.495828396Z","modified_time":"2026-11-12T03:35:38Z","sha256":"42b56cbea8e7b46f2ad7dc1d59334a45862f50366944ee198e97c68a313681ef","source":"amazon-inspector","versions":["1.2.0"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}
|
||||
File diff suppressed because one or more lines are too long
@@ -1 +1 @@
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-19116","published":"2026-11-11T08:34:00Z","modified":"2026-11-11T09:15:03.056260589Z","summary":"Malicious code in humbility-shared (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (bad6120ea5f69f851eafe78dfbb832979077fa6c0175c2bdda88bf073b8ad487)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n","affected":[{"package":{"name":"humbility-shared","ecosystem":"PyPI","purl":"pkg:pypi/humbility-shared"},"versions":["0.0.1","0.0.2"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/humbility-shared/MAL-2026-19116.json"}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/humbility-shared"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/GENERIC-standard-pypi-install-pentest/humbility-shared","import_time":"2026-11-11T09:13:15.507864771Z","modified_time":"2026-11-11T08:34:00.054982Z","sha256":"bad6120ea5f69f851eafe78dfbb832979077fa6c0175c2bdda88bf073b8ad487","source":"kam193","versions":["0.0.1","0.0.2"]}]},"credits":[{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}
|
||||
{"schema_version":"1.9.2","id":"MAL-2026-19116","published":"2026-11-11T08:34:00Z","modified":"2026-11-12T03:45:03.252954552Z","summary":"Malicious code in humbility-shared (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (62ef2123979b9b0569b31e090e1b575bc392c7e40aa1367eed178147b4931c4c)\nsetup.py defines a custom install cmdclass (PostInstall) that runs on `pip install` and collects installer-side identifiers — hostname, USER/USERNAME, current working directory, VIRTUAL_ENV, and CI-related environment variables — and POSTs them as JSON to a hardcoded interactsh collector at https://dbq1g44hj5j25tbieep0dmbhfakw1pyzc.oast.fun/humbility-shared, with an accompanying DNS prefetch of a package-named subdomain under the same canary host. The destination is not the installer's infrastructure and is not caller-configurable; the behavior is undisclosed and fires automatically from the sdist build on a default install when no matching wheel is available, and the shipped wheel installs the same package tree. The name and shape are consistent with a dependency-confusion canary squatting an internal package name on public PyPI to fingerprint build systems that resolve the public name instead of the intended private one.\n\n## Source: kam193 (bad6120ea5f69f851eafe78dfbb832979077fa6c0175c2bdda88bf073b8ad487)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n","affected":[{"package":{"name":"humbility-shared","ecosystem":"PyPI","purl":"pkg:pypi/humbility-shared"},"versions":["0.0.1","0.0.2"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"artifacts":["humbility_shared-0.0.2.tar.gz"],"path":"setup.py","sha256":"2f2be1b7fb18274dc30f47aaf56a34c2d8ae0e9b19936592f3fd75cfededebb3","tlsh":"0f418102d9841cb297d350926c3362593332e113ae026c697ddc438c1f8f6adc1b63ed"}],"package_integrity":[{"filename":"humbility_shared-0.0.2-py3-none-any.whl","hashes":{"blake2b_256":"ad7e79f8992fc515300b826dcd2052fa7b5796a2ed313507563c9829d25df0b4","md5":"78de8334e0f7aced9018f240cb0bc93b","sha256":"21c40f3e99f9e54a98c8e91dd5bd5f2aaac9b1f46a54780d45d7c9467bd0898e"}},{"filename":"humbility_shared-0.0.2.tar.gz","hashes":{"blake2b_256":"92ea637044133555d84f9d1477ecc6125f2b0088ee56e0f6e7f4c354dfad5bb6","md5":"50219a1385c5f4bfecd3469ec8b4536e","sha256":"29ab708e58228ef5aff4161640ed142c5bd78b7247ecd1a5848df34f914e8946"}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/humbility-shared/MAL-2026-19116.json"}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/humbility-shared"},{"type":"PACKAGE","url":"https://pypi.org/project/humbility-shared/0.0.2/"},{"type":"PACKAGE","url":"https://pypi.org/project/humbility-shared/0.0.1/"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/GENERIC-standard-pypi-install-pentest/humbility-shared","import_time":"2026-11-11T09:13:15.507864771Z","modified_time":"2026-11-11T08:34:00.054982Z","sha256":"bad6120ea5f69f851eafe78dfbb832979077fa6c0175c2bdda88bf073b8ad487","source":"kam193","versions":["0.0.1","0.0.2"]},{"id":"IN-MAL-2026-022629","import_time":"2026-11-12T03:36:56.282613971Z","modified_time":"2026-11-12T03:34:03Z","sha256":"5a497af9223d888f88e6c87b0031bac56d6b2f42241dca333067882c7066051c","source":"amazon-inspector","versions":["0.0.2"]},{"id":"IN-MAL-2026-022630","import_time":"2026-11-12T03:36:56.311810489Z","modified_time":"2026-11-12T03:34:14Z","sha256":"62ef2123979b9b0569b31e090e1b575bc392c7e40aa1367eed178147b4931c4c","source":"amazon-inspector","versions":["0.0.1"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}
|
||||
File diff suppressed because one or more lines are too long
Reference in New Issue
Block a user