{"id":"MAL-2026-18296","kind":"package","aliases":["MAL-2026-18296"],"related":[],"title":"Malicious code in zagents-message-bus (PyPI)","description":"---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (0d1891d5d76adad51e120baa41752f0cc878b243eb400e7a12aba1616d31d1f7)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.","summary":null,"severity":"critical","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"zagents-message-bus","fixed":[],"affected":"= 1.0.5; = 1.0.10; = 99.99.99; = 99.99.100","ecosystem":"pypi"}],"ecosystems":["pypi"],"tags":["malicious","package"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-25T19:14:56+00:00","first_seen_at":"2026-10-26T20:52:02+00:00","triaged_at":"2026-10-26T20:53:36+00:00","updated_at":"2026-10-26T21:05:48+00:00","category":"package","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-18296':11A,14A '-2026':10A,13A '0d1891d5d76adad51e120baa41752f0cc878b243eb400e7a12aba1616d31d1f7':32C 'also':63C 'anyth':64C 'base':90C 'basic':41C,100C 'bus':7A,18A 'campaign':82C,93C 'categori':53C 'clear':77C 'co':75C 'code':2A,97C,125C 'command':119C 'contain':96C 'data':101C 'detail':23C 'edit':26C 'execut':123C 'exfiltr':40C,99C 'explor':69C 'generic':84C 'generic-standard-pypi-install-pentest':83C 'harm':80C 'host':45C 'import':37C 'inform':42C 'instal':33C,87C,118C,127C 'ip':106C 'kam193':31C 'kit':73C 'like':58C,67C,105C 'limit':112C 'line':29C 'look':57C,66C 'low':79C 'low-harm':78C 'mal':9A,12A 'malici':1A,19B,124C 'messag':6A 'message':17A 'modul':39C 'overrid':116C 'packag':20B,35C,48C,56C,61C,95C,115C 'pentest':55C,60C,88C 'per':21C 'possibl':81C 'pre':71C 'pre-prepar':70C 'prepar':72C 'probabl':54C 'purpos':52C 'pypi':8A,86C 'reason':89C 'research':74C 'risk':113C 'setup.py':121C 'sourc':22C,30C 'standard':85C 'system':104C 'test':68C 'typic':59C 'usernam':108C 'zagent':5A 'zagents':16A 'zagents-message-bus':4A,15A","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-25T19:14:56+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"osv-malicious","external_id":"MAL-2026-18296","url":"https://osv.dev/vulnerability/MAL-2026-18296","severity":"critical","published_at":"2026-10-25T19:14:56+00:00","modified_at":"2026-10-25T19:45:02+00:00","first_seen_at":"2026-10-26T20:52:02+00:00","fetched_at":"2026-10-26T20:52:02+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}