{"id":"MAL-2026-18095","kind":"package","aliases":["MAL-2026-18095"],"related":[],"title":"Malicious code in resion (PyPI)","description":"---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (2e9e3ce373adb26e45616eec47d727e557f5a696737cb2fbcaa66fb7dc7b7c3e)\nDescription: In this campaign, the main package (resion) has an embeded pickle disguised as a config. A related dependency (pafex) contains code to load the pickle. During unpickling, malicious code embeded in the pickle file is automatically executed. It then establishes persistence via a PTH file and downloads the next stage payload. During analysis, the final remote payload was just a stub\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-10-webreader\n\n\nReasons (based on the campaign):\n\n\n - files-exfiltration\n\n\n - obfuscation\n\n\n - The malicious code is intentionally included in a dependency of the package\n\n\n - Downloads and executes a remote malicious script.\n\n\n - The package contains code to execute remote commands (probably limited to a specific set) on the victim's machine.\n\n\n - rat\n\n\n - persistence\n\n\n - abuses-pth","summary":null,"severity":"critical","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"resion","fixed":[],"affected":"= 22.0.1","ecosystem":"pypi"}],"ecosystems":["pypi"],"tags":["malicious","package"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-20T13:16:36+00:00","first_seen_at":"2026-10-26T20:52:00+00:00","triaged_at":"2026-10-26T21:02:03+00:00","updated_at":"2026-10-26T21:05:48+00:00","category":"package","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-10':102C '-18095':8A,11A '-2026':7A,10A '2026':101C '2e9':26C 'abus':154C 'abuses-pth':153C 'analysi':81C 'automat':64C 'base':105C 'campaign':31C,93C,100C,108C 'categori':90C 'clear':95C 'code':2A,49C,57C,115C,135C 'command':139C 'config':43C 'contain':48C,134C 'depend':46C,121C 'descript':28C 'detail':17C 'disguis':40C 'download':75C,125C 'e3ce373adb26e45616eec47d727e557f5a696737cb2fbcaa66fb7dc7b7c3e':27C 'edit':20C 'embed':38C,58C 'establish':68C 'execut':65C,127C,137C 'exfiltr':111C 'file':62C,73C,110C 'files-exfiltr':109C 'final':83C 'includ':118C 'infosteal':99C 'intent':97C,117C 'kam193':25C 'like':98C 'limit':141C 'line':23C 'load':51C 'machin':150C 'main':33C 'mal':6A,9A 'malici':1A,13B,56C,91C,96C,114C,130C 'next':77C 'obfusc':112C 'packag':14B,34C,124C,133C 'pafex':47C 'payload':79C,85C 'per':15C 'persist':69C,152C 'pickl':39C,53C,61C 'probabl':140C 'pth':72C,155C 'pypi':5A 'rat':151C 'reason':104C 'relat':45C 'remot':84C,129C,138C 'resion':4A,12A,35C 'script':131C 'set':145C 'sourc':16C,24C 'specif':144C 'stage':78C 'stub':89C 'unpickl':55C 'via':70C 'victim':148C 'webread':103C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T13:16:36+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"osv-malicious","external_id":"MAL-2026-18095","url":"https://osv.dev/vulnerability/MAL-2026-18095","severity":"critical","published_at":"2026-10-20T13:16:36+00:00","modified_at":"2026-10-20T14:30:03+00:00","first_seen_at":"2026-10-26T20:52:00+00:00","fetched_at":"2026-10-26T20:52:00+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}