{"id":"MAL-2026-10912","summary":"Malicious code in shark-e2e-bnsneo (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (7d634ef25cc07c2f00565518ab2cd2484a0dbf70a5d32d81376f3f7592bd1804)\nOn import, __init__.py decodes a base64-encoded string and passes it to exec() inside a _sync_module_docs() helper invoked at module top level. The decoded payload is a Windows-only ctypes call that displays a MessageBox (ctypes.windll.user32.MessageBoxW) and performs no network I/O, no filesystem reads of installer secrets, no credential access, and no persistence. The package metadata describes it as an end-to-end test artifact. The concern is the dispatch pattern itself — opaque base64-then-exec at import time is the obfuscated-code-execution shape and is unsafe regardless of today's payload, because the encoded blob is not human-reviewable and could change between releases. No attacker benefit is reachable in this version: the decoded code does not exfiltrate, drop, relay, or persist.\n","modified":"2026-08-05T06:36:44.425389360Z","published":"2026-07-20T10:13:52Z","database_specific":{"malicious-packages-origins":[{"import_time":"2026-07-20T13:14:39.087581069Z","modified_time":"2026-07-20T10:13:52Z","sha256":"bb61ad98eec9da84e25382e0bc0f6abcea86bb84e2a60ace08d3ce38a0546abe","source":"reversing-labs","versions":["0.2.9","0.2.10","0.3.1"],"id":"RLMA-2026-05392"},{"versions":["0.2.10"],"id":"IN-MAL-2026-013147","import_time":"2026-08-05T06:00:47.34012531Z","modified_time":"2026-08-05T05:40:34Z","sha256":"61f4873e44c715f4911e39206843f789baa4e3dcbde8a33b03a6825b66e0620d","source":"amazon-inspector"},{"versions":["0.2.9"],"id":"IN-MAL-2026-012927","import_time":"2026-08-05T06:00:20.718027118Z","modified_time":"2026-08-05T05:09:13Z","sha256":"7d634ef25cc07c2f00565518ab2cd2484a0dbf70a5d32d81376f3f7592bd1804","source":"amazon-inspector"},{"modified_time":"2026-08-05T05:09:31Z","sha256":"8e4381574acbf12443557fb9fa924d9132329336ea5c727197f69452b1068073","source":"amazon-inspector","versions":["0.3.1"],"id":"IN-MAL-2026-012929","import_time":"2026-08-05T06:00:20.961331451Z"}]},"references":[{"type":"PACKAGE","url":"https://pypi.org/project/shark-e2e-bnsneo/0.2.10/"},{"type":"PACKAGE","url":"https://pypi.org/project/shark-e2e-bnsneo/0.2.9/"},{"type":"PACKAGE","url":"https://pypi.org/project/shark-e2e-bnsneo/0.3.1/"}],"affected":[{"package":{"name":"shark-e2e-bnsneo","ecosystem":"PyPI","purl":"pkg:pypi/shark-e2e-bnsneo"},"versions":["0.2.9","0.2.10","0.3.1"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"name":"Embedded Malicious Code","cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature."}],"indicators":{"package_integrity":[{"filename":"shark_e2e_bnsneo-0.2.10-py3-none-any.whl","hashes":{"blake2b_256":"e4b1d7fed51820dbbc0451b1b6269838c68f93a9a1d31bcfe64ff7a353f9ba2b","md5":"5430c33ccad1bacd98b4a849ff7b4788","sha256":"43a87950b68b2299537f5c08cba4571e9e88b7caa45a131468970d1b0e486f46"}},{"filename":"shark_e2e_bnsneo-0.2.10.tar.gz","hashes":{"md5":"761ccc25a161bd39969fa89131d5e16a","sha256":"15ec5a2d326f8115c511abc12f63edd2cc8773dc2dbca9cd29f769b6200b0b0a","blake2b_256":"ac14d093fb1537e9d35acfa17834a1ef1c0b715b19097a70493daf7caa5099b6"}}],"evidence_files":[{"sha256":"1171f97d989783bcb379561ea9da11cff268d5abc5153ed4d9afa7c2add5f9bd","tlsh":"ede02853d4f16873c07cc539e1011c9fc55f7ecc418134d0ae0d60e45f0017518d241d","path":"shark_e2e_test/__init__.py"}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/shark-e2e-bnsneo/MAL-2026-10912.json"}}],"schema_version":"1.8.0","credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}