{"id":"MAL-2026-18133","kind":"package","aliases":["MAL-2026-18133"],"related":[],"title":"Malicious code in journey-test-hellospy (PyPI)","description":"---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (418fea1fe789e9a44c77c08c9135b3da66b773882c9fb2757094c3f55b04321b)\nDuring installation, package exfiltrates potentially sensitive environmental variables\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-10-journey-test-helloshell\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to create a reverse shell, allowing an attacker to execute any commands on the victim's machine.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n\n\n - targetted-attack","summary":null,"severity":"critical","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"journey-test-hellospy","fixed":[],"affected":"= 0.1.1","ecosystem":"pypi"}],"ecosystems":["pypi"],"tags":["malicious","package"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-21T22:40:42+00:00","first_seen_at":"2026-10-26T20:52:00+00:00","triaged_at":"2026-10-26T20:59:55+00:00","updated_at":"2026-10-26T21:05:48+00:00","category":"package","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-10':53C '-18133':11A,14A '-2026':10A,13A '2026':52C '418fea1fe789e9a44c77c08c9135b3da66b773882c9fb2757094c3f55b04321b':32C 'allow':72C 'attack':74C,100C 'base':59C 'campaign':44C,51C,62C 'categori':41C 'clear':46C 'code':2A,66C,95C 'command':78C,89C 'contain':65C 'creat':68C 'detail':23C 'edit':26C 'environment':39C 'execut':76C,93C 'exfiltr':36C 'helloshel':57C 'hellospi':7A 'hellospy':18A 'infosteal':50C 'instal':34C,88C,97C 'intent':48C 'journey':5A,16A,55C 'journey-test-helloshel':54C 'journey-test-hellospi':4A 'journey-test-hellospy':15A 'kam193':31C 'like':49C 'line':29C 'machin':83C 'mal':9A,12A 'malici':1A,19B,42C,47C,94C 'overrid':86C 'packag':20B,35C,64C,85C 'per':21C 'potenti':37C 'pypi':8A 'reason':58C 'revers':70C 'sensit':38C 'setup.py':91C 'shell':71C 'sourc':22C,30C 'target':99C 'targetted-attack':98C 'test':6A,17A,56C 'variabl':40C 'victim':81C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-21T22:40:42+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"osv-malicious","external_id":"MAL-2026-18133","url":"https://osv.dev/vulnerability/MAL-2026-18133","severity":"critical","published_at":"2026-10-21T22:40:42+00:00","modified_at":"2026-10-21T23:30:04+00:00","first_seen_at":"2026-10-26T20:52:00+00:00","fetched_at":"2026-10-26T20:52:00+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}