{"id":"MAL-2026-16212","kind":"package","aliases":["MAL-2026-16212"],"related":[],"title":"Malicious code in cli-anything-ai-market (PyPI)","description":"---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (c5319f74a06670d40b020831dae38da696aa966dc1fdfde45063abb0024df922)\nsetup.py runs automatically during `pip install` and POSTs the installer's OS, username (USER/USERNAME), and hostname (via COMPUTERNAME on Windows or the `hostname` command on POSIX) as form-encoded data to the hardcoded plaintext HTTP endpoint http://182.92.143.23/collect.php. The package declares `packages=[]` and ships no importable code implementing the advertised CLI, so the beacon is the sole install-time behavior. The destination is a bare-IP HTTP endpoint unrelated to any legitimate PyPI or vendor infrastructure, and the collected fields identify the installer's machine and account.\n\n## Source: kam193 (102c2da9fcddf1e398e47d284721f74769e1b5f4c8806570b253a5cc426396e2)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.","summary":null,"severity":"critical","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"cli-anything-ai-market","fixed":[],"affected":"= 1.0.17; = 1.0.18","ecosystem":"pypi"}],"ecosystems":["pypi"],"tags":["malicious","package"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-09-16T06:21:48+00:00","first_seen_at":"2026-10-26T20:51:57+00:00","triaged_at":"2026-10-26T21:10:31+00:00","updated_at":"2026-10-26T21:10:31+00:00","category":"package","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-16212':12A,15A '-2026':11A,14A '/collect.php':75C '102c2da9fcddf1e398e47d284721f74769e1b5f4c8806570b253a5cc426396e2':129C '182.92.143.23':74C 'account':126C 'advertis':87C 'ai':7A,19A 'also':160C 'amazon':34C 'amazon-inspector':33C 'anyth':6A,161C 'anything':18A 'automat':39C 'bare':104C 'bare-ip':103C 'base':187C 'basic':138C,197C 'beacon':91C 'behavior':98C 'c5319f74a06670d40b020831dae38da696aa966dc1fdfde45063abb0024df922':36C 'campaign':179C,190C 'categori':150C 'clear':174C 'cli':5A,17A,88C 'cli-anything-ai-market':4A,16A 'co':172C 'code':2A,84C,194C,222C 'collect':118C 'command':60C,216C 'computernam':54C 'contain':193C 'data':67C,198C 'declar':78C 'destin':100C 'detail':25C 'edit':28C 'encod':66C 'endpoint':73C,107C 'execut':220C 'exfiltr':137C,196C 'explor':166C 'field':119C 'form':65C 'form-encod':64C 'generic':181C 'generic-standard-pypi-install-pentest':180C 'hardcod':70C 'harm':177C 'host':142C 'hostnam':52C,59C 'http':72C,106C 'identifi':120C 'implement':85C 'import':83C,134C 'inform':139C 'infrastructur':115C 'inspector':35C 'instal':42C,46C,96C,122C,130C,184C,215C,224C 'install-tim':95C 'ip':105C,203C 'kam193':128C 'kit':170C 'legitim':111C 'like':155C,164C,202C 'limit':209C 'line':31C 'look':154C,163C 'low':176C 'low-harm':175C 'machin':124C 'mal':10A,13A 'malici':1A,21B,221C 'market':8A,20A 'modul':136C 'os':48C 'overrid':213C 'packag':22B,77C,79C,132C,145C,153C,158C,192C,212C 'pentest':152C,157C,185C 'per':23C 'pip':41C 'plaintext':71C 'posix':62C 'possibl':178C 'post':44C 'pre':168C 'pre-prepar':167C 'prepar':169C 'probabl':151C 'purpos':149C 'pypi':9A,112C,183C 'reason':186C 'research':171C 'risk':210C 'run':38C 'setup.py':37C,218C 'ship':81C 'sole':94C 'sourc':24C,32C,127C 'standard':182C 'system':201C 'test':165C 'time':97C 'typic':156C 'unrel':108C 'user/username':50C 'usernam':49C,205C 'vendor':114C 'via':53C 'window':56C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2026-09-16T06:21:48+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"osv-malicious","external_id":"MAL-2026-16212","url":"https://osv.dev/vulnerability/MAL-2026-16212","severity":"critical","published_at":"2026-09-16T06:21:48+00:00","modified_at":"2026-09-16T07:30:03+00:00","first_seen_at":"2026-10-26T20:51:57+00:00","fetched_at":"2026-10-26T20:51:57+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}