{"id":"MAL-2026-18045","kind":"package","aliases":["MAL-2026-18045"],"related":[],"title":"Malicious code in asurion (PyPI)","description":"---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (393ccbeed4c71a6a21a3a697f0809845dddec09ddc8884662f40e2b2257a28a9)\nsetup.py executes at `pip install` time and POSTs a JSON payload containing the full `os.environ` dictionary along with hostname, username, current working directory, and platform details to the hardcoded endpoint https://webhook.site/b2967b0a-1b24-4670-8ae1-e09e3cf272c4 via urllib.request. Environment variables on developer and CI hosts routinely contain credential-grade secrets (AWS_SECRET_ACCESS_KEY, GITHUB_TOKEN, NPM_TOKEN, database passwords, cloud session tokens), so this install-time beacon is a bulk credential-sweep. The package name, implausibly high version number, and single webhook.site exfil destination are consistent with a dependency-confusion canary/exfil payload targeting an internal `asurion` namespace.\n\n## Source: kam193 (05820dd77e1f73d1a01797af6f10c6fa4ae22038be3fcd6a8cbd8c117cf6436c)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.","summary":null,"severity":"critical","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"asurion","fixed":[],"affected":"= 99.0.0","ecosystem":"pypi"}],"ecosystems":["pypi"],"tags":["malicious","package"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-19T21:22:38+00:00","first_seen_at":"2026-10-26T20:52:00+00:00","triaged_at":"2026-10-26T21:02:03+00:00","updated_at":"2026-10-26T21:05:48+00:00","category":"package","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-18045':8A,11A '-2026':7A,10A '/b2967b0a-1b24-4670-8ae1-e09e3cf272c4':61C '05820dd77e1f73d1a01797af6f10c6fa4ae22038be3fcd6a8cbd8c117cf6436c':130C '393ccbeed4c71a6a21a3a697f0809845dddec09ddc8884662f40e2b2257a28a9':28C 'access':79C 'along':45C 'also':161C 'amazon':26C 'amazon-inspector':25C 'anyth':162C 'asurion':4A,12A,126C 'aw':77C 'base':188C 'basic':139C,198C 'beacon':95C 'bulk':98C 'campaign':180C,191C 'canary/exfil':121C 'categori':151C 'ci':69C 'clear':175C 'cloud':87C 'co':173C 'code':2A,195C,223C 'command':217C 'confus':120C 'consist':115C 'contain':40C,72C,194C 'credenti':74C,100C 'credential-grad':73C 'credential-sweep':99C 'current':49C 'data':199C 'databas':85C 'depend':119C 'dependency-confus':118C 'destin':113C 'detail':17C,54C 'develop':67C 'dictionari':44C 'directori':51C 'edit':20C 'endpoint':58C 'environ':64C 'execut':30C,221C 'exfil':112C 'exfiltr':138C,197C 'explor':167C 'full':42C 'generic':182C 'generic-standard-pypi-install-pentest':181C 'github':81C 'grade':75C 'hardcod':57C 'harm':178C 'high':106C 'host':70C,143C 'hostnam':47C 'implaus':105C 'import':135C 'inform':140C 'inspector':27C 'instal':33C,93C,131C,185C,216C,225C 'install-tim':92C 'intern':125C 'ip':204C 'json':38C 'kam193':129C 'key':80C 'kit':171C 'like':156C,165C,203C 'limit':210C 'line':23C 'look':155C,164C 'low':177C 'low-harm':176C 'mal':6A,9A 'malici':1A,13B,222C 'modul':137C 'name':104C 'namespac':127C 'npm':83C 'number':108C 'os.environ':43C 'overrid':214C 'packag':14B,103C,133C,146C,154C,159C,193C,213C 'password':86C 'payload':39C,122C 'pentest':153C,158C,186C 'per':15C 'pip':32C 'platform':53C 'possibl':179C 'post':36C 'pre':169C 'pre-prepar':168C 'prepar':170C 'probabl':152C 'purpos':150C 'pypi':5A,184C 'reason':187C 'research':172C 'risk':211C 'routin':71C 'secret':76C,78C 'session':88C 'setup.py':29C,219C 'singl':110C 'sourc':16C,24C,128C 'standard':183C 'sweep':101C 'system':202C 'target':123C 'test':166C 'time':34C,94C 'token':82C,84C,89C 'typic':157C 'urllib.request':63C 'usernam':48C,206C 'variabl':65C 'version':107C 'via':62C 'webhook.site':60C,111C 'webhook.site/b2967b0a-1b24-4670-8ae1-e09e3cf272c4':59C 'work':50C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-19T21:22:38+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"osv-malicious","external_id":"MAL-2026-18045","url":"https://osv.dev/vulnerability/MAL-2026-18045","severity":"critical","published_at":"2026-10-19T21:22:38+00:00","modified_at":"2026-10-20T18:30:11+00:00","first_seen_at":"2026-10-26T20:52:00+00:00","fetched_at":"2026-10-26T20:52:00+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}