{"id":"MAL-2026-5458","summary":"Malicious code in ultimate-ai-power (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (90499eb8f54fcc67c067ef7d5397153b4abfc5bbca9d96e7deb291152f49ed3f)\nOn `import ultimate_ai_power`, the package's top-level __init__.py collects the local username (getpass.getuser) and resolved host IP (socket.gethostbyname) and POSTs them to a hardcoded Telegram Bot API endpoint (bot token 8844473290:AAGY..., chat_id 7095972030); a second beacon is sent via an atexit handler. The advertised AI functions (ai_power_boost, neural_enhance, quantum_compute) are placeholders that return constant strings — the package has no real functionality beyond the exfiltration beacon. Metadata uses a placeholder author 'AI Innovation Labs' with a non-existent GitHub org. Cover-story messages in the beacon payload are written in Russian. Any installer who imports the package leaks identifying host/user information to the attacker.\n\n## Source: kam193 (70f226090d6e1bc8acebdeff932907dda5bcf88c21b6c47d25360cd69a606f0d)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n","modified":"2026-06-11T13:46:36.292680426Z","published":"2026-06-09T16:53:29Z","database_specific":{"malicious-packages-origins":[{"source":"kam193","sha256":"70f226090d6e1bc8acebdeff932907dda5bcf88c21b6c47d25360cd69a606f0d","import_time":"2026-06-09T17:45:57.534521243Z","id":"pypi/GENERIC-standard-pypi-install-pentest/ultimate-ai-power","modified_time":"2026-06-09T16:53:29.551414Z","versions":["1.0.0"]},{"id":"IN-MAL-2026-005735","modified_time":"2026-06-11T13:06:25Z","versions":["1.0.0"],"source":"amazon-inspector","sha256":"90499eb8f54fcc67c067ef7d5397153b4abfc5bbca9d96e7deb291152f49ed3f","import_time":"2026-06-11T13:27:20.84823521Z"},{"source":"amazon-inspector","sha256":"4ffa5cc89780d430fb5cea5c6c9916d5369443a431c74cc46beb1c7ebb23c763","import_time":"2026-06-11T13:27:20.885338232Z","id":"IN-MAL-2026-005736","modified_time":"2026-06-11T13:06:25Z","versions":["1.0.0"]}]},"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/ultimate-ai-power"},{"type":"PACKAGE","url":"https://pypi.org/project/ultimate-ai-power/1.0.0/"}],"affected":[{"package":{"name":"ultimate-ai-power","ecosystem":"PyPI","purl":"pkg:pypi/ultimate-ai-power"},"versions":["1.0.0"],"database_specific":{"indicators":{"package_integrity":[{"hashes":{"md5":"b75ac81c854da96d55f42d021dd86edf","sha256":"8a95c959d0c5b02efe5b9687060423cf78ff2a187f9b1c0e41b944d00f2fac41","blake2b_256":"ca1cc178e8075001b0c0fd1dd0a5501373f9fca857fcd6420bfd148a9e1ab882"},"filename":"ultimate_ai_power-1.0.0-py3-none-any.whl"},{"filename":"ultimate_ai_power-1.0.0.tar.gz","hashes":{"blake2b_256":"3742802bbd4cb03862c91d437e69436840cc8d2b2cc27928cef2b003bea8b4d1","md5":"77954527f4cd32fbedaedf48fce2ad0d","sha256":"b7745bd67c11e211714b1254d6e4ae202e58f7ca6998e2701393c5b1e2786435"}}],"domains":["api.telegram.org"],"evidence_files":[{"sha256":"7224250450ce51f8fb00fdd1f136cd6b430c22745e4e582c83a313e692e386a7","tlsh":"55513217ed1e1510a272816fa441e1ade92a621b2b496433f8ecc6719f75c32c2f57dc","path":"src/ultimate_ai_power/__init__.py"}]},"cwes":[{"name":"Embedded Malicious Code","cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature."}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/ultimate-ai-power/MAL-2026-5458.json"}}],"schema_version":"1.7.5","credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"ANALYST"}]}