{"id":"MAL-2026-11426","summary":"Malicious code in trtllm-subdir-test (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (3d2babc3deb7dd71a0515beeb63a43a5ab1b24bea455226652da9ea9377d1e5f)\nsetup.py performs an unconditional HTTP GET to the hardcoded bare-IP URL http://167.233.212.138/cb/db27bcff144c059f/trtllm_subdir_test at install time (wrapped in try/except at module top-level, timeout=5). The path segment encodes the package name, giving the operator confirmation of a successful install and identification of the installer host by its source IP. The package version 99999.0.1 is a dependency-confusion sentinel version-number pattern designed to win resolution against a lower-versioned internal package of the same name; installing this artifact therefore signals to the operator that an organization's build system resolved a public typosquat/confusion package in place of a private one.\n\n## Source: kam193 (e8cdbb30c1c2ddf88a76d18b935d4accf68155f936b5df59a8864fafd7f4e06f)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n","modified":"2026-08-04T23:05:49.658183696Z","published":"2026-08-01T10:57:24Z","database_specific":{"malicious-packages-origins":[{"import_time":"2026-08-01T11:53:26.848312758Z","modified_time":"2026-08-01T10:57:24.408911Z","sha256":"e8cdbb30c1c2ddf88a76d18b935d4accf68155f936b5df59a8864fafd7f4e06f","source":"kam193","versions":["99999.0.0","99999.0.1"],"id":"pypi/GENERIC-standard-pypi-install-pentest/trtllm-subdir-test"},{"sha256":"3d2babc3deb7dd71a0515beeb63a43a5ab1b24bea455226652da9ea9377d1e5f","source":"amazon-inspector","versions":["99999.0.1"],"id":"IN-MAL-2026-011242","import_time":"2026-08-04T22:30:06.795747603Z","modified_time":"2026-08-04T21:52:52Z"},{"sha256":"595456a89d1801b15a9c26af8fcc3622ddb6f97117c0282e04d7f6d6e0676ac9","source":"amazon-inspector","versions":["99999.0.0"],"id":"IN-MAL-2026-011244","import_time":"2026-08-04T22:30:06.884427147Z","modified_time":"2026-08-04T21:53:11Z"}]},"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/trtllm-subdir-test"},{"type":"PACKAGE","url":"https://pypi.org/project/trtllm-subdir-test/99999.0.1/"},{"type":"PACKAGE","url":"https://pypi.org/project/trtllm-subdir-test/99999.0.0/"}],"affected":[{"package":{"name":"trtllm-subdir-test","ecosystem":"PyPI","purl":"pkg:pypi/trtllm-subdir-test"},"versions":["99999.0.0","99999.0.1"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code","cweId":"CWE-506"}],"indicators":{"package_integrity":[{"hashes":{"md5":"516a879cdc1128848a1b24a192d56926","sha256":"f7363da79d13cc4436f9cba50b42a0297554a65e20d08d8692615b9004565a0c","blake2b_256":"9e1520f97e1bb30848ac626c7f95668c61dc3cc31f22fc27b25a0fe0c4bab4cb"},"filename":"trtllm_subdir_test-99999.0.1.tar.gz"}],"evidence_files":[{"tlsh":"63e0684ac813b59650c1daaf167471266b60c2275e0ad4b7f78d435c0f89839df10500","path":"setup.py","sha256":"44ca974206023efe9fbb325728cc9fdfdff5cab12982ec4561622d6d2d1f703b"}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/trtllm-subdir-test/MAL-2026-11426.json"}}],"schema_version":"1.8.0","credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}