{"id":"MAL-2026-18426","kind":"package","aliases":["MAL-2026-18426"],"related":[],"title":"Malicious code in is-it-ai (PyPI)","description":"---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (6a8580750a7d490d65866e9407c451efa8dbad9a90c35a54b87416c57eef1fea)\nIn this campaign, specific versions of involved affected packages hide malicious actions. The malicious code is hidden in specific versions of a dependency (is-it-ai), intentionally pinned by specific versions of dependent packages. All package versions were uploaded with malicious intention; the ones without malicious references are clearly intendent only to hide a cover for the rest. When triggered, the malicious action fingerprints the environment and contacts the remote server. If it responds with an URL, it will be downloaded and executed.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-10-is-it-ai\n\n\nReasons (based on the campaign):\n\n\n - Downloads and executes a remote executable.\n\n\n - The malicious code is intentionally included in a dependency of the package\n\n\n - targetted-attack\n\n\n - action-hidden-in-lib-usage","summary":null,"severity":"critical","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"is-it-ai","fixed":[],"affected":"= 0.1.0; = 0.1.1; = 0.1.3","ecosystem":"pypi"}],"ecosystems":["pypi"],"tags":["malicious","package"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-31T12:48:49+00:00","first_seen_at":"2026-10-31T13:35:46+00:00","triaged_at":"2026-10-31T13:37:14+00:00","updated_at":"2026-10-31T13:45:42+00:00","category":"package","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-10':129C '-18426':11A,14A '-2026':10A,13A '2026':128C '6a8580750a7d490d65866e9407c451efa8dbad9a90c35a54b87416c57eef1fea':32C 'action':44C,96C,161C 'action-hidden-in-lib-usag':160C 'affect':40C 'ai':7A,18A,59C,133C 'attack':159C 'base':135C 'campaign':35C,120C,127C,138C 'categori':117C 'clear':82C,122C 'code':2A,47C,147C 'contact':101C 'cover':88C 'depend':55C,66C,153C 'detail':23C 'download':114C,139C 'edit':26C 'environ':99C 'execut':116C,141C,144C 'fingerprint':97C 'hidden':49C,162C 'hide':42C,86C 'includ':150C 'infosteal':126C 'intend':83C 'intent':60C,75C,124C,149C 'involv':39C 'is':16A 'is-it-ai':4A,15A,56C,130C 'it':17A 'kam193':31C 'lib':164C 'like':125C 'line':29C 'mal':9A,12A 'malici':1A,19B,43C,46C,74C,79C,95C,118C,123C,146C 'one':77C 'packag':20B,41C,67C,69C,156C 'per':21C 'pin':61C 'pypi':8A 'reason':134C 'refer':80C 'remot':103C,143C 'respond':107C 'rest':91C 'server':104C 'sourc':22C,30C 'specif':36C,51C,63C 'target':158C 'targetted-attack':157C 'trigger':93C 'upload':72C 'url':110C 'usag':165C 'version':37C,52C,64C,70C 'without':78C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"first_public_at":"2026-10-31T12:48:49+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"osv-malicious","external_id":"MAL-2026-18426","url":"https://osv.dev/vulnerability/MAL-2026-18426","severity":"critical","published_at":"2026-10-31T12:48:49+00:00","modified_at":"2026-10-31T13:15:04+00:00","first_seen_at":"2026-10-31T13:35:46+00:00","fetched_at":"2026-10-31T13:35:46+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}