---
id: "MAL-2026-18761"
page: "https://infrastack.ai/live/MAL-2026-18761"
kind: "package"
aliases: ["MAL-2026-18761"]
title: "Malicious code in infra-libs (PyPI)"
severity: "critical"
cvss: null
epss: null
exploited: false
status: "open"
category: "package"
products: [{"name": "infra-libs", "fixed": [], "affected": "= 99.99.99", "ecosystem": "pypi"}]
ecosystems: ["pypi"]
tags: ["malicious", "package"]
not_affected_if: []
published_at: "2026-11-08T09:39:28+00:00"
first_seen_at: "2026-11-08T11:17:06+00:00"
updated_at: "2026-11-08T11:22:57+00:00"
sources: [{"source": "osv-malicious", "url": "https://osv.dev/vulnerability/MAL-2026-18761", "first_seen_at": "2026-11-08T11:17:06+00:00"}]
exploit_sources: []
---

# Malicious code in infra-libs (PyPI)

Link for people: https://infrastack.ai/live/MAL-2026-18761 (this .md is for agents)

## Affected

- pypi:infra-libs affected = 99.99.99 fixed no fixed version listed

## Timeline

- 2026-11-08T11:17:06+00:00 osv-malicious https://osv.dev/vulnerability/MAL-2026-18761

## From the sources

---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (721b376b505d760e78f3ac8417b54789f538a5a8127f59fe7c2660067366ce32)
infra-libs 99.99.99 performs install-time and import-time DNS exfiltration of the installer's hostname. setup.py constructs a subdomain label of the form `install-<random-id>-<hostname>` and calls socket.getaddrinfo against `<label>.testa213022.dssldrf.net`, causing the authoritative name server for that zone to receive the installer's platform.node() value during `pip install`. gcp_log_poc/__init__.py repeats the same pattern with an `import-<id>-<hostname>` label on every import of the package, and the module docstring explicitly describes the behavior as a 'DNS callback on import.' The destination domain testa213022.dssldrf.net is unrelated to any declared publisher or purpose, the package has no documented functionality that would justify a hostname-encoded DNS lookup, and the name `infra-libs` is confusable with internal/infrastructure naming conventions commonly targeted by dependency-confusion attacks. No legitimate behavior accompanies the beacon.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_