--- id: "MAL-2026-18219" kind: "package" aliases: ["MAL-2026-18219"] title: "Malicious code in onsokets (PyPI)" severity: "critical" cvss: null epss: null exploited: false status: "open" category: "package" products: [{"name": "onsokets", "fixed": [], "affected": "= 0.1.0", "ecosystem": "pypi"}] ecosystems: ["pypi"] tags: ["malicious", "package"] not_affected_if: [] published_at: "2026-10-23T12:42:59+00:00" first_seen_at: "2026-10-26T20:52:03+00:00" updated_at: "2026-10-26T21:05:48+00:00" sources: [{"source": "osv-malicious", "url": "https://osv.dev/vulnerability/MAL-2026-18219", "first_seen_at": "2026-10-26T20:52:03+00:00"}] --- # Malicious code in onsokets (PyPI) ## Affected - pypi:onsokets affected = 0.1.0 fixed ? ## Timeline - 2026-10-26T20:52:03+00:00 osv-malicious https://osv.dev/vulnerability/MAL-2026-18219 ## From the sources --- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (86e89c263593521f9795193907958f4c642d34253fe9a65526dea1c681808760) onsokets/run.py walks the Android primary storage path /storage/emulated/0/, collects files ending in.json,.py,.pyrubi, and.txt, zips them by extension, and POSTs each archive to https://tapi.bale.ai/bot/sendDocument with chat_id 5263487757. The Bale bot token is hardcoded in the source as the default for BALE_BOT_TOKEN, so installing or running this package exfiltrates installer-owned source, configuration, and text files to an author-controlled Bale chat. The destination is not caller-configurable in any meaningful sense and does not relate to any declared purpose of the package. ## Source: kam193 (844774819aa502a53d6d364b6636fa62eb412fe8b30973c226aeb9b7b89865f9) The package contains code for automated files exfiltration. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-10-proxyrubika Reasons (based on the campaign): - files-exfiltration - target:android --- _Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_