{"id":"MAL-2026-14516","kind":"package","aliases":["MAL-2026-14516"],"related":[],"title":"Malicious code in minecraft-ytreceiver (PyPI)","description":"---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (ad998d7ff924f18f57116d8dd586342fd060d8fb1459d94c0a911589bc2e3686)\nThe package's module polls a hardcoded Telegram bot (api.telegram.org, bot id 8871201315) for commands scoped to a specific chat and topic. On matching messages it downloads a video and forces fullscreen playback while blocking keyboard and mouse input (via keyboard and pynput hooks), kills explorer.exe, and for the /YoutubeCD variant executes `shutdown /s /t 0 /f` to unconditionally power off the host. The bot token, chat id, topic id, and staging directory components are stored as base64 literals decoded at runtime by a helper function; the staging directory is placed at %APPDATA%\\Microsoft\\Crypto\\RSA\\tools to mimic the legitimate Windows RSA key-storage path. At import time the module silently pip-installs undeclared runtime dependencies (requests, keyboard, pynput, psutil) using CREATE_NO_WINDOW to hide the console, then downloads yt-dlp.exe and deno.exe from the mutable `releases/latest` GitHub URLs with no hash verification into the disguised staging path and executes them as part of the remotely driven command chain. pyproject metadata is a placeholder (`Your Name`, no email, homepage, or repository), consistent with a throwaway anonymously published package.\n\n## Source: kam193 (af6c2393210af3735a9353f40789859af7f87c96bcbd00178df62edb2ff7175e)\nThe package hides code for exfiltrating files, recordings from the webcam, screenshots, keylogging.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-08-minecraft-ytreceiver\n\n\nReasons (based on the campaign):\n\n\n - spyware-like\n\n\n - files-exfiltration\n\n\n - uses-telegram-bot\n\n\n - keylogger","summary":null,"severity":"critical","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"minecraft-ytreceiver","fixed":[],"affected":"= 0.1.0; = 0.2.0; = 0.3.0; = 0.4.0; = 0.5.0","ecosystem":"pypi"}],"ecosystems":["pypi"],"tags":["malicious","package"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-08-25T19:28:57+00:00","first_seen_at":"2026-10-26T20:51:56+00:00","triaged_at":"2026-10-26T21:12:36+00:00","updated_at":"2026-10-26T21:12:36+00:00","category":"package","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-08':242C '-14516':10A,13A '-2026':9A,12A '/f':89C '/s':86C '/t':87C '/youtubecd':82C '0':88C '2026':241C '8871201315':45C 'ad998d7ff924f18f57116d8dd586342fd060d8fb1459d94c0a911589bc2e3686':32C 'af6c2393210af3735a9353f40789859af7f87c96bcbd00178df62edb2ff7175e':216C 'amazon':30C 'amazon-inspector':29C 'anonym':211C 'api.telegram.org':42C 'appdata':125C 'base':247C 'base64':110C 'block':67C 'bot':41C,43C,97C,260C 'campaign':233C,240C,250C 'categori':230C 'chain':194C 'chat':52C,99C 'clear':235C 'code':2A,220C 'command':47C,193C 'compon':106C 'consist':207C 'consol':163C 'creat':157C 'crypto':127C 'decod':112C 'deno.exe':168C 'depend':151C 'detail':21C 'directori':105C,121C 'disguis':181C 'download':59C,165C 'driven':192C 'edit':24C 'email':203C 'execut':84C,185C 'exfiltr':222C,256C 'explorer.exe':78C 'file':223C,255C 'files-exfiltr':254C 'forc':63C 'fullscreen':64C 'function':118C 'github':173C 'hardcod':39C 'hash':177C 'helper':117C 'hide':161C,219C 'homepag':204C 'hook':76C 'host':95C 'id':44C,100C,102C 'import':141C 'infosteal':239C 'input':71C 'inspector':31C 'instal':148C 'intent':237C 'kam193':215C 'key':137C 'key-storag':136C 'keyboard':68C,73C,153C 'keylog':229C 'keylogg':261C 'kill':77C 'legitim':133C 'like':238C,253C 'line':27C 'liter':111C 'mal':8A,11A 'malici':1A,17B,231C,236C 'match':56C 'messag':57C 'metadata':196C 'microsoft':126C 'mimic':131C 'minecraft':5A,15A,244C 'minecraft-ytreceiv':4A,243C 'minecraft-ytreceiver':14A 'modul':36C,144C 'mous':70C 'mutabl':171C 'name':201C 'packag':18B,34C,213C,218C 'part':188C 'path':139C,183C 'per':19C 'pip':147C 'pip-instal':146C 'place':123C 'placehold':199C 'playback':65C 'poll':37C 'power':92C 'psutil':155C 'publish':212C 'pynput':75C,154C 'pypi':7A 'pyproject':195C 'reason':246C 'record':224C 'releases/latest':172C 'remot':191C 'repositori':206C 'request':152C 'rsa':128C,135C 'runtim':114C,150C 'scope':48C 'screenshot':228C 'shutdown':85C 'silent':145C 'sourc':20C,28C,214C 'specif':51C 'spywar':252C 'spyware-lik':251C 'stage':104C,120C,182C 'storag':138C 'store':108C 'telegram':40C,259C 'throwaway':210C 'time':142C 'token':98C 'tool':129C 'topic':54C,101C 'uncondit':91C 'undeclar':149C 'url':174C 'use':156C,258C 'uses-telegram-bot':257C 'variant':83C 'verif':178C 'via':72C 'video':61C 'webcam':227C 'window':134C,159C 'yt-dlp.exe':166C 'ytreceiv':6A,245C 'ytreceiver':16A","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2026-08-25T19:28:57+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"osv-malicious","external_id":"MAL-2026-14516","url":"https://osv.dev/vulnerability/MAL-2026-14516","severity":"critical","published_at":"2026-08-25T19:28:57+00:00","modified_at":"2026-08-31T18:31:28+00:00","first_seen_at":"2026-10-26T20:51:56+00:00","fetched_at":"2026-10-26T20:51:56+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}