1 line
3.8 KiB
JSON
1 line
3.8 KiB
JSON
{"schema_version":"1.9.2","id":"MAL-2026-18747","published":"2026-11-07T08:34:31Z","modified":"2026-11-12T03:45:03.294926426Z","summary":"Malicious code in genblaze-atlascloud (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (6279c5d7cd957549bcecd8c2e4aa1377bf53c114341a3350a23464de6e18bad9)\nsetup.py registers custom build_py and install cmdclasses that, on every `pip install` or sdist build, POST a JSON payload containing socket.gethostname(), the install path, os.getcwd(), the Python version, and a canary identifier to the hardcoded bare-IP endpoint http://13.140.137.222:8787/_ah/dc over plain HTTP. The destination is a non-publisher bare IP, there is no opt-in, and the package name resembles an internal vendor name, so any environment whose internal dependency resolves to this public name has host and path identifiers transmitted off-host at install time. The long_description self-labels this as an 'authorized dependency-confusion canary' targeting Backblaze/Bugcrowd, but the exfiltration mechanism is identical to a hostile dependency-confusion payload and the authorization claim is author-controlled text that an installer cannot verify at install time.\n\n## Source: kam193 (c8d0787ea4049d0bb0321d1b25591f303ee2a5d5351aeb725a67250d0ddf4188)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n","affected":[{"package":{"name":"genblaze-atlascloud","ecosystem":"PyPI","purl":"pkg:pypi/genblaze-atlascloud"},"versions":["0.1.0"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"artifacts":["genblaze_atlascloud-0.1.0.tar.gz"],"path":"setup.py","sha256":"2fa7b8d44c0523e237e79a3ebf0dc4f8e3a94dafe9d2ec1cbc0ccf7fd6e58d19","tlsh":"25419671c92209783ecb41a998f756506332ea271d41bc95b8cd07481f0f0ff89b71c1"}],"package_integrity":[{"filename":"genblaze_atlascloud-0.1.0.tar.gz","hashes":{"blake2b_256":"69b1dd23d9743b78fdd11627101ce24aef63829c0f43e3ad73325516e52f266d","md5":"9afee767843f9394f99104a7e502dbba","sha256":"bdac6b1140ac33683d52641e6031ab5b6263dabb4d74eee373d1d1b32c4a9633"}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/genblaze-atlascloud/MAL-2026-18747.json"}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/genblaze-atlascloud"},{"type":"PACKAGE","url":"https://pypi.org/project/genblaze-atlascloud/0.1.0/"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/GENERIC-standard-pypi-install-pentest/genblaze-atlascloud","import_time":"2026-11-07T09:11:45.278379612Z","modified_time":"2026-11-07T08:34:31.241966Z","sha256":"c8d0787ea4049d0bb0321d1b25591f303ee2a5d5351aeb725a67250d0ddf4188","source":"kam193","versions":["0.1.0"]},{"id":"IN-MAL-2026-022628","import_time":"2026-11-12T03:36:56.256874897Z","modified_time":"2026-11-12T03:33:44Z","sha256":"6279c5d7cd957549bcecd8c2e4aa1377bf53c114341a3350a23464de6e18bad9","source":"amazon-inspector","versions":["0.1.0"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]} |