{"id":"MAL-2026-18098","kind":"package","aliases":["MAL-2026-18098"],"related":[],"title":"Malicious code in security-research-startup-snapshot-810764b303 (PyPI)","description":"---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (c7f807a5943ac03cda3bdddc675ad3192d210e1f0ba1300959feff5d1d29c915)\nThe package is most likely a reconnaissance of a shared infrastructure, collecting potentially sensitive data from cloud endpoints, activated via a PTH file on every Python loading. Collected data are stored in a local filesystem, suggesting the operator has to have some degree of control of the environment.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-10-omeraf\n\n\nReasons (based on the campaign):\n\n\n - exfiltration-cloud-tokens\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - other\n\n\n - abuses-pth","summary":null,"severity":"critical","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"security-research-startup-snapshot-810764b303","fixed":[],"affected":"= 0.1.0","ecosystem":"pypi"}],"ecosystems":["pypi"],"tags":["malicious","package"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-20T15:54:20+00:00","first_seen_at":"2026-10-26T20:52:00+00:00","triaged_at":"2026-10-26T20:59:55+00:00","updated_at":"2026-10-26T21:05:48+00:00","category":"package","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-10':97C '-18098':13A,16A '-2026':12A,15A '2026':96C '810764b303':9A,22A 'abus':130C 'abuses-pth':129C 'activ':55C 'base':100C 'basic':114C 'c7f807a5943ac03cda3bdddc675ad3192d210e1f0ba1300959feff5d1d29c915':36C 'campaign':88C,95C,103C 'categori':85C 'clear':90C 'cloud':53C,106C 'code':2A,111C 'collect':48C,64C 'contain':110C 'control':81C 'data':51C,65C,115C 'degre':79C 'detail':27C 'edit':30C 'endpoint':54C 'environ':84C 'everi':61C 'exfiltr':105C,113C 'exfiltration-cloud-token':104C 'file':59C 'filesystem':71C 'infosteal':94C 'infrastructur':47C 'intent':92C 'ip':120C 'kam193':35C 'like':41C,93C,119C 'limit':126C 'line':33C 'load':63C 'local':70C 'mal':11A,14A 'malici':1A,23B,86C,91C 'omeraf':98C 'oper':74C 'packag':24B,38C,109C 'per':25C 'potenti':49C 'pth':58C,131C 'pypi':10A 'python':62C 'reason':99C 'reconnaiss':43C 'research':6A,19A 'risk':127C 'secur':5A 'security':18A 'security-research-startup-snapshot-810764b303':4A,17A 'sensit':50C 'share':46C 'snapshot':8A,21A 'sourc':26C,34C 'startup':7A,20A 'store':67C 'suggest':72C 'system':118C 'token':107C 'usernam':122C 'via':56C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T15:54:20+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"osv-malicious","external_id":"MAL-2026-18098","url":"https://osv.dev/vulnerability/MAL-2026-18098","severity":"critical","published_at":"2026-10-20T15:54:20+00:00","modified_at":"2026-10-20T16:30:04+00:00","first_seen_at":"2026-10-26T20:52:00+00:00","fetched_at":"2026-10-26T20:52:00+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}