{"id":"MAL-2026-4771","summary":"Malicious code in strawberry-graphql (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (8eb433a0339783d1a58993e1611278218492a4349a80801e6c6a2d475278a99c)\nThis package is published under the strawberry-graphql name but diverges from the legitimate upstream by declaring a hard runtime dependency on `cross-web\u003e=0.6.0` in pyproject.toml. The legitimate strawberry-graphql project depends on `python-multipart`, not `cross-web`. The HTTP layer (e.g., strawberry/http/base.py line 6: `from cross_web import HTTPException`) imports symbols from cross_web on module load, so any installer of this package transitively pulls and executes cross-web at import time. Routing every installer through an unvouched third-party package while masquerading as a well-known GraphQL library is the delivery mechanism for a supply-chain attack — the harm is concentrated in whatever cross-web ships, but this package is the lure that forces its installation.\n","modified":"2026-05-27T00:32:14.445443492Z","published":"2026-05-20T17:47:53Z","withdrawn":"2026-05-26T16:40:12Z","database_specific":{"malicious-packages-origins":[{"modified_time":"2026-05-20T17:47:53Z","sha256":"8eb433a0339783d1a58993e1611278218492a4349a80801e6c6a2d475278a99c","source":"amazon-inspector","versions":["0.315.6"],"id":"IN-MAL-2026-003580","import_time":"2026-05-26T05:50:53.972130484Z"}]},"references":[{"type":"PACKAGE","url":"https://pypi.org/project/strawberry-graphql/0.315.6/"}],"affected":[{"package":{"name":"strawberry-graphql","ecosystem":"PyPI","purl":"pkg:pypi/strawberry-graphql"},"versions":["0.315.6"],"database_specific":{"cwes":[{"description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code","cweId":"CWE-506"}],"indicators":{"package_integrity":[{"filename":"strawberry_graphql-0.315.6-py3-none-any.whl","hashes":{"blake2b_256":"bfce3c504374c4d1bb51e73fb36bcbb2957822f78d8d97e71787b6c4badd9602","md5":"f8e820ab5cd0b5a739415c9545791db7","sha256":"4a469df50a043e61620e19d130dffd92d2855e6a874de47ce93adad9ed6b2d09"}},{"hashes":{"sha256":"ed05cb77c13783a6558be081158228170541cebed1a90e80541a23c138dc6fcd","blake2b_256":"d5ec671570f74b7cb1674b2ee7cdb805c80e26a5026c1a3ec70808a981a14441","md5":"4962406f5454c0f62e46a2c69a3f0d94"},"filename":"strawberry_graphql-0.315.6.tar.gz"}],"evidence_files":[{"tlsh":"8412b7a3b39d3a9466c240c160ea9245e366dd57a7a5b40d33db82880a1ccd7f37d73e","path":"pyproject.toml","sha256":"82c449c63c51d80dda2646436b9eb580d4350c2b10517f13a4ebbf65407440ea"}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/withdrawn/pypi/strawberry-graphql/MAL-2026-4771.json"}}],"schema_version":"1.7.5","credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"}]}