{"id":"MAL-2026-18097","kind":"package","aliases":["MAL-2026-18097"],"related":[],"title":"Malicious code in research-probe-6150c1c915 (PyPI)","description":"---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (a646eaf4fe72ba013abc53d52c0bf017a9c4f3bfc54a8c358f9f246d3ac41945)\nThe package is most likely a reconnaissance of a shared infrastructure, collecting potentially sensitive data from cloud endpoints, activated via a PTH file on every Python loading. Collected data are stored in a local filesystem, suggesting the operator has to have some degree of control of the environment.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-10-omeraf\n\n\nReasons (based on the campaign):\n\n\n - exfiltration-cloud-tokens\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - other\n\n\n - abuses-pth","summary":null,"severity":"critical","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"research-probe-6150c1c915","fixed":[],"affected":"= 0.1.0","ecosystem":"pypi"}],"ecosystems":["pypi"],"tags":["malicious","package"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-20T15:52:54+00:00","first_seen_at":"2026-10-26T20:52:00+00:00","triaged_at":"2026-10-26T20:59:55+00:00","updated_at":"2026-10-26T21:05:48+00:00","category":"package","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-10':93C '-18097':11A,14A '-2026':10A,13A '2026':92C '6150c1c915':7A,18A 'a646eaf4fe72ba013abc53d52c0bf017a9c4f3bfc54a8c358f9f246d3ac41945':32C 'abus':126C 'abuses-pth':125C 'activ':51C 'base':96C 'basic':110C 'campaign':84C,91C,99C 'categori':81C 'clear':86C 'cloud':49C,102C 'code':2A,107C 'collect':44C,60C 'contain':106C 'control':77C 'data':47C,61C,111C 'degre':75C 'detail':23C 'edit':26C 'endpoint':50C 'environ':80C 'everi':57C 'exfiltr':101C,109C 'exfiltration-cloud-token':100C 'file':55C 'filesystem':67C 'infosteal':90C 'infrastructur':43C 'intent':88C 'ip':116C 'kam193':31C 'like':37C,89C,115C 'limit':122C 'line':29C 'load':59C 'local':66C 'mal':9A,12A 'malici':1A,19B,82C,87C 'omeraf':94C 'oper':70C 'packag':20B,34C,105C 'per':21C 'potenti':45C 'probe':6A,17A 'pth':54C,127C 'pypi':8A 'python':58C 'reason':95C 'reconnaiss':39C 'research':5A,16A 'research-probe-6150c1c915':4A,15A 'risk':123C 'sensit':46C 'share':42C 'sourc':22C,30C 'store':63C 'suggest':68C 'system':114C 'token':103C 'usernam':118C 'via':52C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T15:52:54+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"osv-malicious","external_id":"MAL-2026-18097","url":"https://osv.dev/vulnerability/MAL-2026-18097","severity":"critical","published_at":"2026-10-20T15:52:54+00:00","modified_at":"2026-10-20T16:30:04+00:00","first_seen_at":"2026-10-26T20:52:00+00:00","fetched_at":"2026-10-26T20:52:00+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}