{"id":"MAL-2026-18581","kind":"package","aliases":["MAL-2026-18581"],"related":[],"title":"Malicious code in hijuko-pilara (PyPI)","description":"---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (3e03de70d14b6b6e3965178f06a73eecdd7197978d8363aaa7c83cf8f3d32696)\nThe package uses fake http-downloaded dependencies to track downloads, and has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: 2026-10-vacsdk\n\n\nReasons (based on the campaign):\n\n\n - dependency-confusion","summary":null,"severity":"critical","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"hijuko-pilara","fixed":[],"affected":"= 1.0.0","ecosystem":"pypi"}],"ecosystems":["pypi"],"tags":["malicious","package"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-03T20:19:07+00:00","first_seen_at":"2026-11-03T22:06:44+00:00","triaged_at":"2026-11-03T22:07:47+00:00","updated_at":"2026-11-03T22:07:47+00:00","category":"package","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-10':79C '-18581':10A,13A '-2026':9A,12A '2026':78C '3e03':30C 'also':58C 'anyth':59C 'base':82C 'campaign':77C,85C 'categori':48C 'clear':72C 'co':70C 'code':2A 'confus':88C 'de70d14b6b6e3965178f06a73eecdd7197978d8363aaa7c83cf8f3d32696':31C 'depend':39C,87C 'dependency-confus':86C 'detail':21C 'download':38C,42C 'edit':24C 'explor':64C 'fake':35C 'harm':75C 'hijuko':5A,15A 'hijuko-pilara':4A,14A 'http':37C 'http-download':36C 'kam193':29C 'kit':68C 'like':53C,62C 'line':27C 'look':52C,61C 'low':74C 'low-harm':73C 'mal':8A,11A 'malici':1A,17B 'packag':18B,33C,51C,56C 'pentest':50C,55C 'per':19C 'pilara':6A,16A 'possibl':76C 'pre':66C 'pre-prepar':65C 'prepar':67C 'probabl':49C 'purpos':47C 'pypi':7A 'reason':81C 'research':69C 'sourc':20C,28C 'test':63C 'track':41C 'typic':54C 'use':34C 'vacsdk':80C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"pkeys":["hijukopilara"],"ptokens":["hijuko","pilara"],"labels":["critical","malicious","package","pypi"],"campaign_type":null,"first_public_at":"2026-11-03T20:19:07+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"osv-malicious","external_id":"MAL-2026-18581","url":"https://osv.dev/vulnerability/MAL-2026-18581","severity":"critical","published_at":"2026-11-03T20:19:07+00:00","modified_at":"2026-11-03T21:15:03+00:00","first_seen_at":"2026-11-03T22:06:44+00:00","fetched_at":"2026-11-03T22:06:44+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}