{"id":"MAL-2026-16408","kind":"package","aliases":["MAL-2026-16408"],"related":[],"title":"Malicious code in snap-queue (PyPI)","description":"---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (e0bb29642def9150e89bacf4da4e1a64f7bc972cd145053cbb0feee0baa768f3)\nThe sdist's setup.py defines a `_wus_boot()` function that is invoked at module top-level before `setup(...)`, so it runs automatically on `pip install snap-queue`. The function uses `subprocess.Popen` to launch `pythonw.exe` (replacing `python.exe` in `sys.executable`) running a sibling file `_snapqueue_core.py` with `creationflags=0x08000000` (CREATE_NO_WINDOW), and wraps the whole call in a blanket `try/except: pass`. Standard modules are aliased under underscore names (`_os`, `_sys`, `_sp`) to reduce visual prominence. The launched `_snapqueue_core.py` is undocumented in README and package metadata and is unrelated to the advertised FIFO-queue functionality. The combined shape — install-time execution, deliberate console-window suppression on Windows, error-swallowing, and detachment of the child from the pip process — is a hidden install-time stager that hands control on the installer's machine to undocumented sibling code the moment the package is installed.\n\n## Source: kam193 (62bf582784fd41b3484157f6454ddcb6ab2ae10a5d93abeb19a5bfa5642b7e64)\nDuring installation, the package attempts to silently execute code. In analyzed versions, the payload file was missing.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-09-snap-queue\n\n\nReasons (based on the campaign):\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.","summary":null,"severity":"critical","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"snap-queue","fixed":[],"affected":"= 1.0.0","ecosystem":"pypi"}],"ecosystems":["pypi"],"tags":["malicious","package"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-09-22T18:42:22+00:00","first_seen_at":"2026-10-26T20:51:57+00:00","triaged_at":"2026-10-26T21:10:31+00:00","updated_at":"2026-10-26T21:10:31+00:00","category":"package","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-09':211C '-16408':10A,13A '-2026':9A,12A '0x08000000':80C '2026':210C '62bf582784fd41b3484157f6454ddcb6ab2ae10a5d93abeb19a5bfa5642b7e64':181C 'advertis':123C 'alias':97C 'amazon':30C 'amazon-inspector':29C 'analyz':192C 'attempt':186C 'automat':55C 'base':216C 'blanket':91C 'boot':40C 'call':88C 'campaign':202C,209C,219C 'categori':199C 'child':149C 'clear':204C 'code':2A,172C,190C,231C 'combin':129C 'command':225C 'consol':137C 'console-window':136C 'control':163C 'creat':81C 'creationflag':79C 'defin':37C 'deliber':135C 'detach':146C 'detail':21C 'e0bb29642def9150e89bacf4da4e1a64f7bc972cd145053cbb0feee0baa768f3':32C 'edit':24C 'error':143C 'error-swallow':142C 'execut':134C,189C,229C 'fifo':125C 'fifo-queu':124C 'file':76C,196C 'function':41C,63C,127C 'hand':162C 'hidden':156C 'infosteal':208C 'inspector':31C 'instal':58C,132C,158C,166C,178C,183C,224C,233C 'install-tim':131C,157C 'intent':206C 'invok':44C 'kam193':180C 'launch':67C,109C 'level':49C 'like':207C 'line':27C 'machin':168C 'mal':8A,11A 'malici':1A,17B,200C,205C,230C 'metadata':117C 'miss':198C 'modul':46C,95C 'moment':174C 'name':100C 'os':101C 'overrid':222C 'packag':18B,116C,176C,185C,221C 'pass':93C 'payload':195C 'per':19C 'pip':57C,152C 'process':153C 'promin':107C 'pypi':7A 'python.exe':70C 'pythonw.exe':68C 'queue':6A,16A,61C,126C,214C 'readm':114C 'reason':215C 'reduc':105C 'replac':69C 'run':54C,73C 'sdist':34C 'setup':51C 'setup.py':36C,227C 'shape':130C 'sibl':75C,171C 'silent':188C 'snap':5A,15A,60C,213C 'snap-queu':4A,59C,212C 'snap-queue':14A 'snapqueue_core.py':77C,110C 'sourc':20C,28C,179C 'sp':103C 'stager':160C 'standard':94C 'subprocess.popen':65C 'suppress':139C 'swallow':144C 'sys':102C 'sys.executable':72C 'time':133C,159C 'top':48C 'top-level':47C 'try/except':92C 'underscor':99C 'undocu':112C,170C 'unrel':120C 'use':64C 'version':193C 'visual':106C 'whole':87C 'window':83C,138C,141C 'wrap':85C 'wus':39C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2026-09-22T18:42:22+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"osv-malicious","external_id":"MAL-2026-16408","url":"https://osv.dev/vulnerability/MAL-2026-16408","severity":"critical","published_at":"2026-09-22T18:42:22+00:00","modified_at":"2026-09-23T02:30:05+00:00","first_seen_at":"2026-10-26T20:51:57+00:00","fetched_at":"2026-10-26T20:51:57+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}