MAL-2026-12502

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/gcli-control/MAL-2026-12502.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-12502
Published
2026-08-05T12:29:27Z
Modified
2026-08-05T13:36:27.282712778Z
Summary
Malicious code in gcli-control (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (b8bd4de0b73d7df676127ce8c632117fc7ea8d008bf941fb7d385f67a84f8d67)

The package installs and runs a host daemon (python -m gcli host) that polls a shared JSON document at api.npoint.io for commands, decrypts them, executes them on the installer's machine, and posts encrypted results back. Any party who writes to that shared document controls full-host code execution on every daemon polling it. host.py hardcodes a default rendezvous bin ID 599ac3c39189fcc26e5a shared across all installers who do not override it, and crypto.py implements a __BYPASS__ password sentinel with a BY: base64-only path that disables AES-GCM entirely, allowing anonymous unauthenticated command injection against every daemon on the default bin. The command dispatcher exposes 200+ operations invokable through this channel, including browserpasswords, browsercookies, keylogstart/read/save, webcamcapture, shellhistory, wifipassword, screenshot, and users add/changepassword (credential and secret harvesting); and installstartup/installscheduled/installwatchdog writing Windows Run keys, systemd user services, cron entries, and startup-folder launchers that relaunch python -m gcli host on boot, plus an elevator module offering elevateuac / elevatesudo / persist_admin for privilege escalation. The combination is a full remote-access trojan: remote command execution, credential/browser-secret exfiltration, keylogging and webcam capture, boot persistence, and privilege elevation, all reachable by any party who knows the default rendezvous bin.

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "IN-MAL-2026-014679",
            "import_time": "2026-08-05T13:08:36.505344012Z",
            "sha256": "406ed2a02ad0507ec71fce2e2d287f628c7284a2476dce055727d963136d0a50",
            "versions": [
                "0.12.2"
            ],
            "source": "amazon-inspector",
            "modified_time": "2026-08-05T12:29:51Z"
        },
        {
            "id": "IN-MAL-2026-014682",
            "import_time": "2026-08-05T13:08:36.864542597Z",
            "sha256": "f94a308a9c8d68b87a9613385c1c818128ddfc01b29aa941047f209e601b4e46",
            "versions": [
                "0.5.0"
            ],
            "source": "amazon-inspector",
            "modified_time": "2026-08-05T12:30:15Z"
        },
        {
            "id": "IN-MAL-2026-014681",
            "import_time": "2026-08-05T13:08:36.786446297Z",
            "sha256": "b8bd4de0b73d7df676127ce8c632117fc7ea8d008bf941fb7d385f67a84f8d67",
            "modified_time": "2026-08-05T12:30:08Z",
            "source": "amazon-inspector",
            "versions": [
                "0.12.4"
            ]
        },
        {
            "id": "IN-MAL-2026-014676",
            "import_time": "2026-08-05T13:08:36.240575176Z",
            "sha256": "d99ccd85346f7a31a3eaffef748f106c1de645446ebd3e73a444fd340384ac3f",
            "modified_time": "2026-08-05T12:29:27Z",
            "source": "amazon-inspector",
            "versions": [
                "0.11.1"
            ]
        }
    ]
}
References
Credits

Affected packages

PyPI / gcli-control

Package

Name
gcli-control
View open source insights on deps.dev
Purl
pkg:pypi/gcli-control

Affected ranges

Affected versions

0.*
0.5.0
0.11.1
0.12.2
0.12.4

Database specific

cwes 
[
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    }
]
indicators 
{
    "evidence_files": [
        {
            "path": "gcli/host.py",
            "tlsh": "5fb254a9e85d0c2383d3c4199562b912661fa7430b05763879fce3685f0d876c1fbeea",
            "sha256": "2d7a8ca559f313aa7c456a51b8791e51a66d7eeb5662beb8351f6c5707c9018f"
        }
    ],
    "package_integrity": [
        {
            "filename": "gcli_control-0.12.2-py3-none-any.whl",
            "hashes": {
                "sha256": "abb622dbc79151f0f7093234cd9babffb0403ee1825ff3b8fc8a56e9f5872cf4",
                "blake2b_256": "d27dc9b9b6115daff0b00d0914b8e41ea47016d3218055d87994651eef8c32c2",
                "md5": "a29a053c3d813f68f743908db4c2fb0d"
            }
        },
        {
            "filename": "gcli_control-0.12.2.tar.gz",
            "hashes": {
                "sha256": "338d2cea46e021a6ceec0d1866fb57fddfa3ca692dc2e8c8f2d5d07354494458",
                "blake2b_256": "cbd399b3a749b555b4eb171c4b79c82fd613c87f2309c1a4c85f929f3c0cd9fa",
                "md5": "cf75c848d9808d2c5ed1957d4eef34ab"
            }
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/gcli-control/MAL-2026-12502.json"