{"id":"MAL-2026-18343","kind":"package","aliases":["MAL-2026-18343"],"related":[],"title":"Malicious code in numprint (PyPI)","description":"---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (ca6ff316077349c92e2d1e5d7c3683a16e6542b952d5c7fc8743efa5d4c80243)\nDuring installation the package starts a background process executing commands provided by the attacker. The C2 communication happens through a GitHub Gist.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-10-numprint\n\n\nReasons (based on the campaign):\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n\n\n - The package contains code to execute remote commands (probably limited to a specific set) on the victim's machine.\n\n\n - rat","summary":null,"severity":"critical","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"numprint","fixed":[],"affected":"= 1.2.0","ecosystem":"pypi"}],"ecosystems":["pypi"],"tags":["malicious","package"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-27T16:48:48+00:00","first_seen_at":"2026-10-27T18:03:10+00:00","triaged_at":"2026-10-27T18:05:19+00:00","updated_at":"2026-10-27T18:11:52+00:00","category":"package","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-10':61C '-18343':8A,11A '-2026':7A,10A '2026':60C 'attack':40C 'background':33C 'base':64C 'c2':42C 'ca6ff316077349c92e2d1e5d7c3683a16e6542b952d5c7fc8743efa5d4c80243':26C 'campaign':52C,59C,67C 'categori':49C 'clear':54C 'code':2A,79C,85C 'command':36C,73C,89C 'communic':43C 'contain':84C 'detail':17C 'edit':20C 'execut':35C,77C,87C 'gist':48C 'github':47C 'happen':44C 'infosteal':58C 'instal':28C,72C,81C 'intent':56C 'kam193':25C 'like':57C 'limit':91C 'line':23C 'machin':100C 'mal':6A,9A 'malici':1A,13B,50C,55C,78C 'numprint':4A,12A,62C 'overrid':70C 'packag':14B,30C,69C,83C 'per':15C 'probabl':90C 'process':34C 'provid':37C 'pypi':5A 'rat':101C 'reason':63C 'remot':88C 'set':95C 'setup.py':75C 'sourc':16C,24C 'specif':94C 'start':31C 'victim':98C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T16:48:48+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"osv-malicious","external_id":"MAL-2026-18343","url":"https://osv.dev/vulnerability/MAL-2026-18343","severity":"critical","published_at":"2026-10-27T16:48:48+00:00","modified_at":"2026-10-27T17:30:37+00:00","first_seen_at":"2026-10-27T18:03:10+00:00","fetched_at":"2026-10-27T18:03:10+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}