{"id":"MAL-2026-15926","summary":"Malicious code in astlsi (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (222a62d677f99497f67476b9cc87886c05fb2a08827430934fb518798abb8339)\nThe package presents itself as a proxy health-check utility, but its exported starts() function walks /storage/emulated/0/ (Android user-storage), collects files with source/document extensions (.py,.json,.txt,.html,.php), packs them into a zip archive, and POSTs the archive to https://tapi.bale.ai/\u003cbot-token\u003e/sendDocument with chat_id 5263487757. The Bale bot token and chat id are hardcoded in the module. The proxy-latency scaffolding around this call performs no real proxy check and serves as a cover story for the single exfiltration request.\n\n## Source: kam193 (902508cd9285413782c405b438e21f1f29787d38aba7badf71aeb4e0b632b9b6)\nThe provided functionality hides code that exfiltrates files to a remote location.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-09-asti\n\n\nReasons (based on the campaign):\n\n\n - files-exfiltration\n\n\n - action-hidden-in-lib-usage\n\n\n - target:android\n","modified":"2026-09-04T21:30:08.867303843Z","published":"2026-09-04T10:24:22Z","database_specific":{"malicious-packages-origins":[{"versions":["0.1.0"],"id":"pypi/2026-09-asti/astlsi","import_time":"2026-09-04T11:16:20.228063684Z","modified_time":"2026-09-04T10:24:22.871944Z","sha256":"902508cd9285413782c405b438e21f1f29787d38aba7badf71aeb4e0b632b9b6","source":"kam193"},{"versions":["0.1.0"],"id":"IN-MAL-2026-019645","import_time":"2026-09-04T21:15:20.962515799Z","modified_time":"2026-09-04T21:04:00Z","sha256":"222a62d677f99497f67476b9cc87886c05fb2a08827430934fb518798abb8339","source":"amazon-inspector"}]},"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/astlsi"},{"type":"PACKAGE","url":"https://pypi.org/project/astlsi/0.1.0/"}],"affected":[{"package":{"name":"astlsi","ecosystem":"PyPI","purl":"pkg:pypi/astlsi"},"versions":["0.1.0"],"database_specific":{"cwes":[{"description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code","cweId":"CWE-506"}],"indicators":{"package_integrity":[{"filename":"astlsi-0.1.0-py3-none-any.whl","hashes":{"sha256":"ceeb1262d0c8311e3a872c78a51b8a34571f7af28311f1c0218565c07227845c","blake2b_256":"cc157bb70d4549edcaad60449847ed311bb06415eb40df05944cdb43255a1b55","md5":"ec6862623e3886ae490b6db20bd42e01"}},{"filename":"astlsi-0.1.0.tar.gz","hashes":{"sha256":"d30dd793438aa05dc23380651a19a878e5a8a56738920eed8a046a8a04f36e64","blake2b_256":"34aa98a7300e6b38d2906ccf9f2668b6b18ece6522e85f08ff777633bb36c88e","md5":"02305a642cd29db00d6bca66dde157cd"}}],"evidence_files":[{"path":"astlsi/starts.py","sha256":"f9364154bda53b317ae4cc3abab255c36e2b5947552d65da560ba62e09590794","tlsh":"f2b21f10ec552865d39b9c7ee846e243222f9c17028d7c24b1fc82dc5f35ab695e6cf9"}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/astlsi/MAL-2026-15926.json"}}],"schema_version":"1.9.0","credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}