{"id":"MAL-2026-18203","kind":"package","aliases":["MAL-2026-18203"],"related":[],"title":"Malicious code in journey-teste-shellhello (PyPI)","description":"---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (b0297ac29ad3587325dc37510f2af62bef8b7d92f76e7f123739fc6f49cead0c)\nIn specific environments, package starts a reverse shell during installation.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-10-journey-test-helloshell\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to create a reverse shell, allowing an attacker to execute any commands on the victim's machine.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n\n\n - targetted-attack","summary":null,"severity":"critical","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"journey-teste-shellhello","fixed":[],"affected":"= 0.2.0","ecosystem":"pypi"}],"ecosystems":["pypi"],"tags":["malicious","package"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-22T21:16:34+00:00","first_seen_at":"2026-10-26T20:52:01+00:00","triaged_at":"2026-10-26T20:57:54+00:00","updated_at":"2026-10-26T21:05:48+00:00","category":"package","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-10':55C '-18203':11A,14A '-2026':10A,13A '2026':54C 'allow':74C 'attack':76C,102C 'b0297ac29ad3587325dc37510f2af62bef8b7d92f76e7f123739fc6f49cead0c':32C 'base':61C 'campaign':46C,53C,64C 'categori':43C 'clear':48C 'code':2A,68C,97C 'command':80C,91C 'contain':67C 'creat':70C 'detail':23C 'edit':26C 'environ':35C 'execut':78C,95C 'helloshel':59C 'infosteal':52C 'instal':42C,90C,99C 'intent':50C 'journey':5A,16A,57C 'journey-test-helloshel':56C 'journey-teste-shellhello':4A,15A 'kam193':31C 'like':51C 'line':29C 'machin':85C 'mal':9A,12A 'malici':1A,19B,44C,49C,96C 'overrid':88C 'packag':20B,36C,66C,87C 'per':21C 'pypi':8A 'reason':60C 'revers':39C,72C 'setup.py':93C 'shell':40C,73C 'shellhello':7A,18A 'sourc':22C,30C 'specif':34C 'start':37C 'target':101C 'targetted-attack':100C 'test':6A,58C 'teste':17A 'victim':83C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-22T21:16:34+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"osv-malicious","external_id":"MAL-2026-18203","url":"https://osv.dev/vulnerability/MAL-2026-18203","severity":"critical","published_at":"2026-10-22T21:16:34+00:00","modified_at":"2026-10-22T22:30:05+00:00","first_seen_at":"2026-10-26T20:52:01+00:00","fetched_at":"2026-10-26T20:52:01+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}