https://vulnerability.circl.lu/rss/recent/ossf_malicious_packages/10 2026-08-26T06:20:39.846186+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/mal-2026-14523 2026-08-26T05:11:49+00:00 --- _-= Per source details. Do not edit below this line.=-_ ## Source: kam193 (c27b8e593dc0298e09bb4a5fd6acc68dc03bf324bdc7267e87482fdd10b0fa2d) Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities. Campaign: GENERIC-standard-pypi-install-pentest Reasons (based on the campaign): - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk. - The package overrides the install command in setup.py to execute malicious code during installation.

--- _-= Per source details. Do not edit below this line.=-_ ## Source: kam193 (c27b8e593dc0298e09bb4a5fd6acc68dc03bf324bdc7267e87482fdd10b0fa2d) Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities. Campaign: GENERIC-standard-pypi-install-pentest Reasons (based on the campaign): - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk. - The package overrides the install command in setup.py to execute malicious code during installation.

2026-08-26T05:11:49+00:00 https://vulnerability.circl.lu/vuln/mal-2026-14522 2026-08-26T04:18:46+00:00 --- _-= Per source details. Do not edit below this line.=-_ ## Source: kam193 (ede434cf61641064a49939821778e511c3fcf8afab7e443582b8b103e13171d9) Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities. Campaign: GENERIC-standard-pypi-install-pentest Reasons (based on the campaign): - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk. - The package overrides the install command in setup.py to execute malicious code during installation.

--- _-= Per source details. Do not edit below this line.=-_ ## Source: kam193 (ede434cf61641064a49939821778e511c3fcf8afab7e443582b8b103e13171d9) Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities. Campaign: GENERIC-standard-pypi-install-pentest Reasons (based on the campaign): - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk. - The package overrides the install command in setup.py to execute malicious code during installation.

2026-08-26T04:16:50+00:00 https://vulnerability.circl.lu/vuln/mal-2026-14519 2026-08-26T03:50:52+00:00 --- _-= Per source details. Do not edit below this line.=-_ ## Source: ghsa-malware (233594ba444a80cbd5c49ac1da879d813b4ca97677dbe05930931496cd29582c) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

--- _-= Per source details. Do not edit below this line.=-_ ## Source: ghsa-malware (233594ba444a80cbd5c49ac1da879d813b4ca97677dbe05930931496cd29582c) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

2026-08-26T03:50:51+00:00 https://vulnerability.circl.lu/vuln/mal-2026-14521 2026-08-26T03:40:39+00:00 --- _-= Per source details. Do not edit below this line.=-_ ## Source: ghsa-malware (b33a1f643603b3bbf0f4e15b104240715e0de6a10025eeeafb9b015d684ca5f1) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

--- _-= Per source details. Do not edit below this line.=-_ ## Source: ghsa-malware (b33a1f643603b3bbf0f4e15b104240715e0de6a10025eeeafb9b015d684ca5f1) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

2026-08-26T03:40:39+00:00 https://vulnerability.circl.lu/vuln/mal-2026-14520 2026-08-26T03:40:39+00:00 --- _-= Per source details. Do not edit below this line.=-_ ## Source: ghsa-malware (11831d8204f695d6cfc23750c0899851f375e519e715e845730f90b7fc8d51a9) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

--- _-= Per source details. Do not edit below this line.=-_ ## Source: ghsa-malware (11831d8204f695d6cfc23750c0899851f375e519e715e845730f90b7fc8d51a9) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

2026-08-26T03:40:38+00:00 https://vulnerability.circl.lu/vuln/mal-2026-14518 2026-08-25T23:30:46+00:00 --- _-= Per source details. Do not edit below this line.=-_ ## Source: ghsa-malware (c8792c4228bd6ef8c063ffc62f1dce3fdd8c8592faed97791142a5ada179da84) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

--- _-= Per source details. Do not edit below this line.=-_ ## Source: ghsa-malware (c8792c4228bd6ef8c063ffc62f1dce3fdd8c8592faed97791142a5ada179da84) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

2026-08-25T23:30:45+00:00 https://vulnerability.circl.lu/vuln/mal-2026-14517 2026-08-25T23:30:46+00:00 --- _-= Per source details. Do not edit below this line.=-_ ## Source: ghsa-malware (5d203bb3b10279207818bd41b3e03e40bc5b2851307f058b36682ce694d725ad) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

--- _-= Per source details. Do not edit below this line.=-_ ## Source: ghsa-malware (5d203bb3b10279207818bd41b3e03e40bc5b2851307f058b36682ce694d725ad) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

2026-08-25T23:30:45+00:00 https://vulnerability.circl.lu/vuln/mal-2026-14516 2026-08-25T22:11:57.018508+00:00 --- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (ad998d7ff924f18f57116d8dd586342fd060d8fb1459d94c0a911589bc2e3686) The package's module polls a hardcoded Telegram bot (api.telegram.org, bot id 8871201315) for commands scoped to a specific chat and topic. On matching messages it downloads a video and forces fullscreen playback while blocking keyboard and mouse input (via keyboard and pynput hooks), kills explorer.exe, and for the /YoutubeCD variant executes `shutdown /s /t 0 /f` to unconditionally power off the host. The bot token, chat id, topic id, and staging directory components are stored as base64 literals decoded at runtime by a helper function; the staging directory is placed at %APPDATA%\Microsoft\Crypto\RSA\tools to mimic the legitimate Windows RSA key-storage path. At import time the module silently pip-installs undeclared runtime dependencies (requests, keyboard, pynput, psutil) using CREATE_NO_WINDOW to hide the console, then downloads yt-dlp.exe and deno.exe from the mutable `releases/latest` GitHub URLs with no hash verification into the disguised staging path and executes them as part of the remotely driven command chain. pyproject metadata is a placeholder (`Your Name`, no email, homepage, or repository), consistent with a throwaway anonymously published package. ## Source: kam193 (af6c2393210af3735a9353f40789859af7f87c96bcbd00178df62edb2ff7175e) The package hides code for exfiltrating files, recordings from the webcam, screenshots, keylogging. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-08-minecraft-ytreceiver Reasons (based on the campaign): - spyware-like - files-exfiltration - uses-telegram-bot - keylogger

--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (ad998d7ff924f18f57116d8dd586342fd060d8fb1459d94c0a911589bc2e3686) The package's module polls a hardcoded Telegram bot (api.telegram.org, bot id 8871201315) for commands scoped to a specific chat and topic. On matching messages it downloads a video and forces fullscreen playback while blocking keyboard and mouse input (via keyboard and pynput hooks), kills explorer.exe, and for the /YoutubeCD variant executes `shutdown /s /t 0 /f` to unconditionally power off the host. The bot token, chat id, topic id, and staging directory components are stored as base64 literals decoded at runtime by a helper function; the staging directory is placed at %APPDATA%\Microsoft\Crypto\RSA\tools to mimic the legitimate Windows RSA key-storage path. At import time the module silently pip-installs undeclared runtime dependencies (requests, keyboard, pynput, psutil) using CREATE_NO_WINDOW to hide the console, then downloads yt-dlp.exe and deno.exe from the mutable `releases/latest` GitHub URLs with no hash verification into the disguised staging path and executes them as part of the remotely driven command chain. pyproject metadata is a placeholder (`Your Name`, no email, homepage, or repository), consistent with a throwaway anonymously published package. ## Source: kam193 (af6c2393210af3735a9353f40789859af7f87c96bcbd00178df62edb2ff7175e) The package hides code for exfiltrating files, recordings from the webcam, screenshots, keylogging. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-08-minecraft-ytreceiver Reasons (based on the campaign): - spyware-like - files-exfiltration - uses-telegram-bot - keylogger

2026-08-25T19:28:57+00:00 https://vulnerability.circl.lu/vuln/mal-2026-14514 2026-08-25T16:57:19+00:00 --- _-= Per source details. Do not edit below this line.=-_ ## Source: ghsa-malware (080d6cf0cee122cb6b5676ea670ced2ca3e022a521f84b559e6643dca4fde253) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

--- _-= Per source details. Do not edit below this line.=-_ ## Source: ghsa-malware (080d6cf0cee122cb6b5676ea670ced2ca3e022a521f84b559e6643dca4fde253) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

2026-08-25T16:57:19+00:00 https://vulnerability.circl.lu/vuln/mal-2026-14515 2026-08-25T16:57:19+00:00 --- _-= Per source details. Do not edit below this line.=-_ ## Source: ghsa-malware (975f9cbb95ca5ce6d913c57698058355d247364e65d3a1d0a37d6e75f8325725) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

--- _-= Per source details. Do not edit below this line.=-_ ## Source: ghsa-malware (975f9cbb95ca5ce6d913c57698058355d247364e65d3a1d0a37d6e75f8325725) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

2026-08-25T16:57:18+00:00