{"id":"MAL-2026-18752","kind":"package","aliases":["MAL-2026-18752"],"related":[],"title":"Malicious code in qzc690384 (PyPI)","description":"---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (2aaf64364e0f3a5688772d501b9400cd9caf65ecdc82a869844ff73999aff2e4)\nThe adjudication model's output was cut off by the provider safety filter on every attempt, which happens when the reviewed code reads like operational malware. Scores come from the partial verdict when it carried them; confidence is capped so a person reviews this version before any block.\n\n## Source: kam193 (dbd73fb476a20a6d0f4bc4fe820a007283789e6c03548f93e67fff7a58b2ede1)\nIn this campaign, packages execute malicious code during installation. The exact behavior varies between versions: fingerprinting environment, exposing a backdoor server listening for remote commands, downloading remote commands from a hardcoded location. Next stages seem to be downloaded from localhost, what suggests the code may still be a preparation for the real attack.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-11-qzc\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package contains code to execute remote commands (probably limited to a specific set) on the victim's machine.\n\n\n - backdoor\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.","summary":null,"severity":"critical","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"qzc690384","fixed":[],"affected":"= 1.0.0","ecosystem":"pypi"}],"ecosystems":["pypi"],"tags":["malicious","package"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-07T14:41:21+00:00","first_seen_at":"2026-11-07T15:48:14+00:00","triaged_at":"2026-11-07T15:50:06+00:00","updated_at":"2026-11-07T21:49:57+00:00","category":"package","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-11':145C '-18752':8A,11A '-2026':7A,10A '2026':144C '2aaf64364e0f3a5688772d501b9400cd9caf65ecdc82a869844ff73999aff2e4':28C 'adjud':30C 'amazon':26C 'amazon-inspector':25C 'attack':132C 'attempt':44C 'backdoor':99C,191C 'base':148C 'basic':158C 'behavior':91C 'block':76C 'campaign':82C,136C,143C,151C 'cap':67C 'carri':63C 'categori':133C 'clear':138C 'code':2A,50C,86C,123C,155C,175C,203C 'come':56C 'command':104C,107C,179C,197C 'confid':65C 'contain':154C,174C 'cut':35C 'data':159C 'dbd73fb476a20a6d0f4bc4fe820a007283789e6c03548f93e67fff7a58b2ede1':79C 'detail':17C 'download':105C,117C 'edit':20C 'environ':96C 'everi':43C 'exact':90C 'execut':84C,177C,201C 'exfiltr':157C 'expos':97C 'filter':41C 'fingerprint':95C 'happen':46C 'hardcod':110C 'infosteal':142C 'inspector':27C 'instal':88C,196C,205C 'intent':140C 'ip':164C 'kam193':78C 'like':52C,141C,163C 'limit':170C,181C 'line':23C 'listen':101C 'localhost':119C 'locat':111C 'machin':190C 'mal':6A,9A 'malici':1A,13B,85C,134C,139C,202C 'malwar':54C 'may':124C 'model':31C 'next':112C 'oper':53C 'output':33C 'overrid':194C 'packag':14B,83C,153C,173C,193C 'partial':59C 'per':15C 'person':70C 'prepar':128C 'probabl':180C 'provid':39C 'pypi':5A 'qzc':146C 'qzc690384':4A,12A 'read':51C 'real':131C 'reason':147C 'remot':103C,106C,178C 'review':49C,71C 'risk':171C 'safeti':40C 'score':55C 'seem':114C 'server':100C 'set':185C 'setup.py':199C 'sourc':16C,24C,77C 'specif':184C 'stage':113C 'still':125C 'suggest':121C 'system':162C 'usernam':166C 'vari':92C 'verdict':60C 'version':73C,94C 'victim':188C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"pkeys":["qzc690384"],"ptokens":["qzc690384"],"labels":["critical","malicious","package","pypi"],"campaign_type":null,"search_a":"'-18752':8A,11A '-2026':7A,10A 'code':2A 'mal':6A,9A 'malici':1A 'pypi':5A 'qzc690384':4A,12A","search_b":"'malici':13B 'packag':14B","search_c":"'-11':145C '2026':144C '2aaf64364e0f3a5688772d501b9400cd9caf65ecdc82a869844ff73999aff2e4':28C 'adjud':30C 'amazon':26C 'amazon-inspector':25C 'attack':132C 'attempt':44C 'backdoor':99C,191C 'base':148C 'basic':158C 'behavior':91C 'block':76C 'campaign':82C,136C,143C,151C 'cap':67C 'carri':63C 'categori':133C 'clear':138C 'code':50C,86C,123C,155C,175C,203C 'come':56C 'command':104C,107C,179C,197C 'confid':65C 'contain':154C,174C 'cut':35C 'data':159C 'dbd73fb476a20a6d0f4bc4fe820a007283789e6c03548f93e67fff7a58b2ede1':79C 'detail':17C 'download':105C,117C 'edit':20C 'environ':96C 'everi':43C 'exact':90C 'execut':84C,177C,201C 'exfiltr':157C 'expos':97C 'filter':41C 'fingerprint':95C 'happen':46C 'hardcod':110C 'infosteal':142C 'inspector':27C 'instal':88C,196C,205C 'intent':140C 'ip':164C 'kam193':78C 'like':52C,141C,163C 'limit':170C,181C 'line':23C 'listen':101C 'localhost':119C 'locat':111C 'machin':190C 'malici':85C,134C,139C,202C 'malwar':54C 'may':124C 'model':31C 'next':112C 'oper':53C 'output':33C 'overrid':194C 'packag':83C,153C,173C,193C 'partial':59C 'per':15C 'person':70C 'prepar':128C 'probabl':180C 'provid':39C 'qzc':146C 'read':51C 'real':131C 'reason':147C 'remot':103C,106C,178C 'review':49C,71C 'risk':171C 'safeti':40C 'score':55C 'seem':114C 'server':100C 'set':185C 'setup.py':199C 'sourc':16C,24C,77C 'specif':184C 'stage':113C 'still':125C 'suggest':121C 'system':162C 'usernam':166C 'vari':92C 'verdict':60C 'version':73C,94C 'victim':188C","cause_entry":null,"cause_path":null,"first_public_at":"2026-11-07T14:41:21+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"osv-malicious","external_id":"MAL-2026-18752","url":"https://osv.dev/vulnerability/MAL-2026-18752","severity":"critical","published_at":"2026-11-07T14:41:21+00:00","modified_at":"2026-11-07T20:45:03+00:00","first_seen_at":"2026-11-07T15:48:14+00:00","fetched_at":"2026-11-07T21:49:57+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}