1 line
3.7 KiB
JSON
1 line
3.7 KiB
JSON
{"schema_version":"1.9.2","id":"MAL-2026-18746","published":"2026-11-07T08:32:18Z","modified":"2026-11-12T03:45:03.293519056Z","summary":"Malicious code in genblaze-fal (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (8a271155be7da40cba43376d6a085b75a96c0bb9fed885c421424bc42fd8d07b)\nsetup.py defines custom build_py and install cmdclasses that, on sdist build and install, POST a JSON payload containing the installer's hostname, current working directory, install path, Python version, and a timestamp to the hardcoded bare-IP URL http://13.140.137.222:8787/_ah/dc over plain HTTP. The destination is a bare IPv4 address on a non-standard port with no TLS and no relation to any declared publisher domain. A source-code comment labels the behavior an 'authorized dependency-confusion canary', but the package is published on public PyPI where any installer who resolves this name will transmit their host identifiers to that endpoint. The sdist is the only distribution file and auto-executes on default pip install for every listed platform.\n\n## Source: kam193 (253796cb8693d039c09267f3d6d398031e3ad27640bb70f21f2e75d2578be649)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n","affected":[{"package":{"name":"genblaze-fal","ecosystem":"PyPI","purl":"pkg:pypi/genblaze-fal"},"versions":["0.1.0"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"artifacts":["genblaze_fal-0.1.0.tar.gz"],"path":"setup.py","sha256":"a9ba1e323ebfe7804887462cae68afed20996aa58049e9f8286940031900c40a","tlsh":"2b418660c92609787ecb41a5a8fb66947332ba272d40bc9578cd07481f0f0ff89b72c5"}],"package_integrity":[{"filename":"genblaze_fal-0.1.0.tar.gz","hashes":{"blake2b_256":"14f156c083988e29272500c0dd47e8c55d765925740c4d9fa8555876b303bb20","md5":"e1c3bc03bb78e4b7ef71ab5c9c4b99b5","sha256":"ac4c445f1701dd9a99150129ab196e77ad207d1295c99d6dc95b01636b88d454"}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/genblaze-fal/MAL-2026-18746.json"}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/genblaze-fal"},{"type":"PACKAGE","url":"https://pypi.org/project/genblaze-fal/0.1.0/"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/GENERIC-standard-pypi-install-pentest/genblaze-fal","import_time":"2026-11-07T08:36:36.403321334Z","modified_time":"2026-11-07T08:32:18.92264Z","sha256":"253796cb8693d039c09267f3d6d398031e3ad27640bb70f21f2e75d2578be649","source":"kam193","versions":["0.1.0"]},{"id":"IN-MAL-2026-022627","import_time":"2026-11-12T03:36:56.209736663Z","modified_time":"2026-11-12T03:31:54Z","sha256":"8a271155be7da40cba43376d6a085b75a96c0bb9fed885c421424bc42fd8d07b","source":"amazon-inspector","versions":["0.1.0"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]} |