{"id":"MAL-2026-18300","kind":"package","aliases":["MAL-2026-18300"],"related":[],"title":"Malicious code in claudeopusenifile (PyPI)","description":"---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (051daf7dfb8c28210996afbf561646b38781f563483e6c2e7471add0a6021885)\nDuring installation, obfuscated code is used to fetch code hidden in an image containing a Python application with a native extension module. This module holds an obfuscated infostealer which collects sensitive data and exfiltrates them to a C2 server retrieved from transaction history in the Polygon blockchain.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-09-donutautosellsrc\n\n\nReasons (based on the campaign):\n\n\n - infostealer\n\n\n - Downloads and executes a remote executable.\n\n\n - obfuscation\n\n\n - The package contains code to detect if it is running in a sandbox environment.\n\n\n - malware\n\n\n - native-extension\n\n\n - steganography\n\n\n - c2-in-blockchain","summary":null,"severity":"critical","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"claudeopusenifile","fixed":[],"affected":"= 0.1.3","ecosystem":"pypi"}],"ecosystems":["pypi"],"tags":["malicious","package"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-25T23:40:43+00:00","first_seen_at":"2026-10-26T20:52:03+00:00","triaged_at":"2026-10-26T20:53:36+00:00","updated_at":"2026-10-26T21:05:48+00:00","category":"package","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-09':86C '-18300':8A,11A '-2026':7A,10A '051daf7dfb8c28210996afbf561646b38781f563483e6c2e7471add0a6021885':26C '2026':85C 'applic':43C 'base':89C 'blockchain':73C,123C 'c2':64C,121C 'c2-in-blockchain':120C 'campaign':77C,84C,92C 'categori':74C 'claudeopusenifil':4A 'claudeopusenifile':12A 'clear':79C 'code':2A,30C,35C,104C 'collect':56C 'contain':40C,103C 'data':58C 'detail':17C 'detect':106C 'donutautosellsrc':87C 'download':94C 'edit':20C 'environ':114C 'execut':96C,99C 'exfiltr':60C 'extens':47C,118C 'fetch':34C 'hidden':36C 'histori':69C 'hold':51C 'imag':39C 'infosteal':54C,83C,93C 'instal':28C 'intent':81C 'kam193':25C 'like':82C 'line':23C 'mal':6A,9A 'malici':1A,13B,75C,80C 'malwar':115C 'modul':48C,50C 'nativ':46C,117C 'native-extens':116C 'obfusc':29C,53C,100C 'packag':14B,102C 'per':15C 'polygon':72C 'pypi':5A 'python':42C 'reason':88C 'remot':98C 'retriev':66C 'run':110C 'sandbox':113C 'sensit':57C 'server':65C 'sourc':16C,24C 'steganographi':119C 'transact':68C 'use':32C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-25T23:40:43+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"osv-malicious","external_id":"MAL-2026-18300","url":"https://osv.dev/vulnerability/MAL-2026-18300","severity":"critical","published_at":"2026-10-25T23:40:43+00:00","modified_at":"2026-10-26T01:00:04+00:00","first_seen_at":"2026-10-26T20:52:03+00:00","fetched_at":"2026-10-26T20:52:03+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}