{"id":"MAL-2026-15929","summary":"Malicious code in pymaas (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (3d07b21485fb1007b5cca6c07b48620d235200b19dd62e8d6018d019ec5557dc)\nOn `import pymaas`, top-level code in the package invokes a `_canary()` function that collects the entire `os.environ` dictionary and `socket.gethostname()`, serializes them as JSON, and POSTs the payload via `urllib.request.urlopen` to the hardcoded host `https://vuorblucjega.dssldrf.net/python-install-log/pymaas`. The behavior runs unconditionally on import with no consent, no gating, and no relationship to the destination domain. Combined with the implausibly high version `99.99.0` and the package's own `dependency confusion test` description, the shipped code is a dependency-confusion beacon that harvests any credentials present in the process environment (CI tokens, cloud provider keys, registry auth tokens, database passwords) and delivers them to an external non-publisher host.\n\n## Source: kam193 (81e7303aa1cc62cb0fd1e4e6bc28ce118568e8eb5fb56d2a44818bacedf5ebdb)\nDuring import, the package exfiltrates environment variables.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-09-amirgo4496\n\n\nReasons (based on the campaign):\n\n\n - exfiltration-env-variables\n\n\n - dependency-confusion\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n","modified":"2026-09-04T21:30:08.747828345Z","published":"2026-09-04T15:01:36Z","database_specific":{"iocs":{"domains":["vuorblucjega.dssldrf.net"]},"malicious-packages-origins":[{"source":"kam193","versions":["99.99.0"],"id":"pypi/2026-09-amirgo4496/pymaas","import_time":"2026-09-04T15:39:11.26492664Z","modified_time":"2026-09-04T15:01:36.040381Z","sha256":"81e7303aa1cc62cb0fd1e4e6bc28ce118568e8eb5fb56d2a44818bacedf5ebdb"},{"modified_time":"2026-09-04T21:03:35Z","sha256":"3d07b21485fb1007b5cca6c07b48620d235200b19dd62e8d6018d019ec5557dc","source":"amazon-inspector","versions":["99.99.0"],"id":"IN-MAL-2026-019642","import_time":"2026-09-04T21:15:20.848117517Z"}]},"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/pymaas"},{"type":"PACKAGE","url":"https://pypi.org/project/pymaas/99.99.0/"}],"affected":[{"package":{"name":"pymaas","ecosystem":"PyPI","purl":"pkg:pypi/pymaas"},"versions":["99.99.0"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"package_integrity":[{"filename":"pymaas-99.99.0-py3-none-any.whl","hashes":{"blake2b_256":"36d37b12d33301f67459052831c71dd49abbdc5a3b89a924772285ed7d04d16d","md5":"4d2b128923db871badebbc64ec1e564c","sha256":"cd5c4f8341e4ad35bbc88ca87ac3752d94cc5e154c07bd2bba8eca751c5ea4e7"}},{"hashes":{"blake2b_256":"3d61ef7d11108d92bdba571703010ec97ce8fa93be900ad4dbc896ccf0f46df7","md5":"f86d9bca1a08f8e5fcbb9ac8cb7c2ada","sha256":"e836de22a1550a1b6963780b66233afa552aeecec8912063163495b4f927624d"},"filename":"pymaas-99.99.0.tar.gz"}],"evidence_files":[{"path":"src/pymaas/__init__.py","sha256":"1894a55a3f8fe1b356ff641eda725a7bcbbdb41049a2a059c7b51dadafba7cd5","tlsh":"bbf0c0d2e1207553b587b1008c699aa432557d0f7e126cb1f88d17984fcd83e90b25ec"}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/pymaas/MAL-2026-15929.json"}}],"schema_version":"1.9.0","credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}