{"id":"MAL-2026-15827","summary":"Malicious code in company-sdk (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (46a5156bc1c582f0be8c1c33340b338cba12276dd9ea90235210fbc2ff950c85)\ncompany_sdk.py executes credential-harvesting code at module import time. It walks the installer's home directory reading SSH keys (~/.ssh), cloud credentials (~/.aws, ~/.azure, ~/.config/gcloud), package manager tokens (~/.npmrc, ~/.pypirc, ~/.netrc, ~/.pgpass), Docker/Kube configs,.env files, Vault/Terraform tokens, and shell history, and enumerates process environment variables whose names match credential keywords (TOKEN, SECRET, KEY, PASSWORD, AWS_, GITHUB_, etc.). The collected material is gzip-compressed, XOR-encrypted with a keystream derived via PBKDF2-HMAC-SHA256 from a hardcoded 32-byte hex passphrase, HMAC-tagged, and base64-encoded. The _drop() function then POSTs the encrypted blob to https://api.github.com/gists using a hardcoded ghp_-prefixed GitHub Personal Access Token as the Bearer credential, with TLS verification explicitly disabled (ssl.CERT_NONE). The upload runs unconditionally on import inside a bare try/except so failures are silent. Using GitHub Gist as the drop channel routes the exfiltration through a domain that typically bypasses egress filtering, and encrypting the payload with an author-only key conceals contents from network inspection.\n\n## Source: kam193 (f4b45f8532bf4a1b0b6a1b987a12b2ab7e4b626351b48bfffb159beed150983e)\nDuring import, package exfiltrates sensitive files, credentials and env variables to a private GitHub Gist.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-09-company-sdk\n\n\nReasons (based on the campaign):\n\n\n - exfiltration-env-variables\n\n\n - files-exfiltration\n\n\n - exfiltration-credentials\n\n\n - exfiltration-ssh-keys\n","modified":"2026-09-03T03:15:04.889909808Z","published":"2026-09-03T00:57:34Z","database_specific":{"malicious-packages-origins":[{"versions":["0.0.1"],"id":"pypi/2026-09-company-sdk/company-sdk","import_time":"2026-09-03T01:33:35.652333375Z","modified_time":"2026-09-03T00:57:34.884097Z","sha256":"f4b45f8532bf4a1b0b6a1b987a12b2ab7e4b626351b48bfffb159beed150983e","source":"kam193"},{"source":"amazon-inspector","versions":["0.0.1"],"id":"IN-MAL-2026-019363","import_time":"2026-09-03T03:02:47.332769358Z","modified_time":"2026-09-03T01:33:16Z","sha256":"46a5156bc1c582f0be8c1c33340b338cba12276dd9ea90235210fbc2ff950c85"}]},"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/company-sdk"},{"type":"PACKAGE","url":"https://pypi.org/project/company-sdk/0.0.1/"}],"affected":[{"package":{"name":"company-sdk","ecosystem":"PyPI","purl":"pkg:pypi/company-sdk"},"versions":["0.0.1"],"database_specific":{"cwes":[{"name":"Embedded Malicious Code","cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature."}],"indicators":{"evidence_files":[{"tlsh":"00a1d897a8e59c92a31b234c6c87c4a077756a6f0c443a64349dfe446f8c43e01b3b5d","path":"company_sdk.py","sha256":"5790fefd145ab8756f97f9a5d0835889a071e5f47efffa045c290a1bbbad992b"}],"package_integrity":[{"filename":"company_sdk-0.0.1-py3-none-any.whl","hashes":{"blake2b_256":"e47f125645bb51fd9d96a177b6b1839ce572d85b1ac1ad2d700d977c763b3b5a","md5":"dea939433370489607f253305374f997","sha256":"c930756d478077cc66a840db16d3933179b36fd5b0c3e5908093f648828c8a5b"}},{"hashes":{"sha256":"4be058f4f5a11553fd079115596c3fbfc069ed353e9900f704461a1f1d402997","blake2b_256":"34669be62d0de19de8b6de9d613385294550cacc751b00dfebae4d8d9d415c89","md5":"9b1875878bcae26cece0397e8abf9f47"},"filename":"company_sdk-0.0.1.tar.gz"}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/company-sdk/MAL-2026-15827.json"}}],"schema_version":"1.9.0","credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}