{"id":"MAL-2026-18490","kind":"package","aliases":["MAL-2026-18490"],"related":[],"title":"Malicious code in pyprig (PyPI)","description":"---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (11f4beddcb42e2348d31d2ef0605d72198a28e796467c8afbac5c5c30d870315)\nClone of a legitimate Pydantic package with the added downloading of a remote code. The remote code is delivered from the GitHub repository and unpacked as a new module and then called during initialization of any models (runner injected into cloned Pydantic code). During analysis, the remote code was just a placeholder.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-11-pyprig\n\n\nReasons (based on the campaign):\n\n\n - Downloads and executes a remote malicious script.\n\n\n - clones-real-package","summary":null,"severity":"critical","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"pyprig","fixed":[],"affected":"= 1.2.0; = 1.2.1; = 1.2.2","ecosystem":"pypi"}],"ecosystems":["pypi"],"tags":["malicious","package"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-02T22:11:26+00:00","first_seen_at":"2026-11-03T00:46:57+00:00","triaged_at":"2026-11-03T00:48:08+00:00","updated_at":"2026-11-03T00:48:08+00:00","category":"package","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-11':91C '-18490':8A,11A '-2026':7A,10A '11f4beddcb42e2348d31d2ef0605d72198a28e796467c8afbac5c5c30d870315':26C '2026':90C 'add':35C 'analysi':71C 'base':94C 'call':58C 'campaign':82C,89C,97C 'categori':79C 'clear':84C 'clone':27C,67C,106C 'clones-real-packag':105C 'code':2A,40C,43C,69C,74C 'deliv':45C 'detail':17C 'download':36C,98C 'edit':20C 'execut':100C 'github':48C 'infosteal':88C 'initi':60C 'inject':65C 'intent':86C 'kam193':25C 'legitim':30C 'like':87C 'line':23C 'mal':6A,9A 'malici':1A,13B,80C,85C,103C 'model':63C 'modul':55C 'new':54C 'packag':14B,32C,108C 'per':15C 'placehold':78C 'pydant':31C,68C 'pypi':5A 'pyprig':4A,12A,92C 'real':107C 'reason':93C 'remot':39C,42C,73C,102C 'repositori':49C 'runner':64C 'script':104C 'sourc':16C,24C 'unpack':51C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"pkeys":["pyprig"],"ptokens":["pyprig"],"labels":["critical","malicious","package","pypi"],"first_public_at":"2026-11-02T22:11:26+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"osv-malicious","external_id":"MAL-2026-18490","url":"https://osv.dev/vulnerability/MAL-2026-18490","severity":"critical","published_at":"2026-11-02T22:11:26+00:00","modified_at":"2026-11-02T23:15:02+00:00","first_seen_at":"2026-11-03T00:46:57+00:00","fetched_at":"2026-11-03T00:46:57+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}