---
id: "MAL-2026-18760"
page: "https://infrastack.ai/live/MAL-2026-18760"
kind: "package"
aliases: ["MAL-2026-18760"]
title: "Malicious code in expect-tests (PyPI)"
severity: "critical"
cvss: null
epss: null
exploited: false
status: "open"
category: "package"
products: [{"name": "expect-tests", "fixed": [], "affected": "= 99.99.99", "ecosystem": "pypi"}]
ecosystems: ["pypi"]
tags: ["malicious", "package"]
not_affected_if: []
published_at: "2026-11-08T09:39:19+00:00"
first_seen_at: "2026-11-08T11:17:06+00:00"
updated_at: "2026-11-08T11:22:57+00:00"
sources: [{"source": "osv-malicious", "url": "https://osv.dev/vulnerability/MAL-2026-18760", "first_seen_at": "2026-11-08T11:17:06+00:00"}]
exploit_sources: []
---

# Malicious code in expect-tests (PyPI)

Link for people: https://infrastack.ai/live/MAL-2026-18760 (this .md is for agents)

## Affected

- pypi:expect-tests affected = 99.99.99 fixed no fixed version listed

## Timeline

- 2026-11-08T11:17:06+00:00 osv-malicious https://osv.dev/vulnerability/MAL-2026-18760

## From the sources

---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (f693b92cac909344a9cbab93f5f80ab6d820759af5042d323d90f10351d39d76)
setup.py and gcp_log_poc/__init__.py read the installer's hostname via platform.node() and encode it into a subdomain of testa213022.dssldrf.net, then invoke socket.getaddrinfo() to trigger DNS resolution to that domain's authoritative server. This causes the installer's hostname to be exfiltrated to a non-first-party DNS server both when pip builds/installs the package (setup.py) and whenever the installed module is imported. The destination domain is unrelated to any legitimate purpose declared by the package, the package name (`expect-tests`) and the imported module name (`gcp_log_poc`) do not match, and the behavior is undisclosed. The 99.99.99 version number and name-vs-module mismatch are consistent with a dependency-confusion / name-squat lure.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_