{"id":"MAL-2026-17863","kind":"package","aliases":["MAL-2026-17863"],"related":[],"title":"Malicious code in crelic-bqwheel-52f66a3f1d (PyPI)","description":"---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (0ca34d571eaf519847a961f7da1f203d35f7a3c011f5fd4df3744f50a0615d2e)\nPackage attempts to collect environment variables from a specific environment, self-identified as BigQuery user-defined functions research. The final exfiltration of collected data seems to require the control of the execution environment, supporting the research/pentest claims.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: 2026-10-crelic-bqwheel-52f66a3f1d\n\n\nReasons (based on the campaign):\n\n\n - abuses-pth\n\n\n - exfiltration-env-variables\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.","summary":null,"severity":"critical","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"crelic-bqwheel-52f66a3f1d","fixed":[],"affected":"= 0.0.1","ecosystem":"pypi"}],"ecosystems":["pypi"],"tags":["malicious","package"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-13T22:46:32+00:00","first_seen_at":"2026-10-26T20:51:59+00:00","triaged_at":"2026-10-26T21:06:18+00:00","updated_at":"2026-10-26T21:06:18+00:00","category":"package","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-10':103C '-17863':11A,14A '-2026':10A,13A '0ca34d571eaf519847a961f7da1f203d35f7a3c011f5fd4df3744f50a0615d2e':32C '2026':102C '52f66a3f1d':7A,18A,107C 'abus':114C 'abuses-pth':113C 'also':82C 'anyth':83C 'attempt':34C 'base':109C 'basic':126C 'bigqueri':47C 'bqwheel':6A,17A,106C 'campaign':101C,112C 'categori':72C 'claim':71C 'clear':96C 'co':94C 'code':2A,123C 'collect':36C,57C 'contain':122C 'control':63C 'crelic':5A,16A,105C 'crelic-bqwheel-52f66a3f1d':4A,15A,104C 'data':58C,127C 'defin':50C 'detail':23C 'edit':26C 'env':118C 'environ':37C,42C,67C 'execut':66C 'exfiltr':55C,117C,125C 'exfiltration-env-vari':116C 'explor':88C 'final':54C 'function':51C 'harm':99C 'identifi':45C 'ip':132C 'kam193':31C 'kit':92C 'like':77C,86C,131C 'limit':138C 'line':29C 'look':76C,85C 'low':98C 'low-harm':97C 'mal':9A,12A 'malici':1A,19B 'packag':20B,33C,75C,80C,121C 'pentest':74C,79C 'per':21C 'possibl':100C 'pre':90C 'pre-prepar':89C 'prepar':91C 'probabl':73C 'pth':115C 'pypi':8A 'reason':108C 'requir':61C 'research':52C,93C 'research/pentest':70C 'risk':139C 'seem':59C 'self':44C 'self-identifi':43C 'sourc':22C,30C 'specif':41C 'support':68C 'system':130C 'test':87C 'typic':78C 'user':49C 'user-defin':48C 'usernam':134C 'variabl':38C,119C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-13T22:46:32+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"osv-malicious","external_id":"MAL-2026-17863","url":"https://osv.dev/vulnerability/MAL-2026-17863","severity":"critical","published_at":"2026-10-13T22:46:32+00:00","modified_at":"2026-10-13T23:45:04+00:00","first_seen_at":"2026-10-26T20:51:59+00:00","fetched_at":"2026-10-26T20:51:59+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}