MAL-2025-192431

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/ctosec-appsec-wb-xray-adapters/MAL-2025-192431.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2025-192431
Published
2025-12-10T08:58:53Z
Modified
2025-12-11T09:46:40.894833Z
Summary
Malicious code in ctosec-appsec-wb-xray-adapters (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: kam193 (71bd5cbfd64c9f4eec926fb0345f7a31ed5a012dfcf6182a0a550c2d3ad93240)

Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.

Category: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.

Campaign: GENERIC-standard-pypi-install-pentest

Reasons (based on the campaign):

  • The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.

  • The package overrides the install command in setup.py to execute malicious code during installation.

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "pypi/GENERIC-standard-pypi-install-pentest/ctosec-appsec-wb-xray-adapters",
            "import_time": "2025-12-10T09:40:31.207293885Z",
            "modified_time": "2025-12-10T08:58:53.893697Z",
            "versions": [
                "0.1.1"
            ],
            "sha256": "71bd5cbfd64c9f4eec926fb0345f7a31ed5a012dfcf6182a0a550c2d3ad93240",
            "source": "kam193"
        },
        {
            "id": "pypi/GENERIC-standard-pypi-install-pentest/ctosec-appsec-wb-xray-adapters",
            "import_time": "2025-12-10T15:40:21.176928763Z",
            "modified_time": "2025-12-10T14:54:39.24168Z",
            "versions": [
                "0.1.1",
                "0.1.2"
            ],
            "sha256": "44fd86bc6ff94b74b76b74d284882cbf323fbd1c813630793ee7ff3f9de9b163",
            "source": "kam193"
        },
        {
            "id": "pypi/GENERIC-standard-pypi-install-pentest/ctosec-appsec-wb-xray-adapters",
            "import_time": "2025-12-10T20:40:59.699573407Z",
            "modified_time": "2025-12-10T19:32:09.931612Z",
            "versions": [
                "0.1.1",
                "0.1.2",
                "0.2.0"
            ],
            "sha256": "27769a6ea9c6ebb2e96ed1f156636622bbb966add59d4dde4aaec5acd5c1a3df",
            "source": "kam193"
        },
        {
            "id": "pypi/GENERIC-standard-pypi-install-pentest/ctosec-appsec-wb-xray-adapters",
            "import_time": "2025-12-10T21:07:53.033624402Z",
            "modified_time": "2025-12-10T20:43:23.655153Z",
            "versions": [
                "0.1.1",
                "0.1.2",
                "0.2.0",
                "0.2.1"
            ],
            "sha256": "1eab8b708c7a1d8dd5ecd5b5607010cd12789f902cf80fce36ba4c04ce78d8ee",
            "source": "kam193"
        },
        {
            "id": "pypi/GENERIC-standard-pypi-install-pentest/ctosec-appsec-wb-xray-adapters",
            "import_time": "2025-12-11T03:34:56.3686387Z",
            "modified_time": "2025-12-11T01:57:28.394673Z",
            "versions": [
                "0.1.1",
                "0.1.2",
                "0.2.0",
                "0.2.1",
                "0.2.2",
                "0.2.3"
            ],
            "sha256": "061246f4741a25899672510c20faeb13ade9c0854239baf5b5b40966616c5e3e",
            "source": "kam193"
        },
        {
            "id": "pypi/GENERIC-standard-pypi-install-pentest/ctosec-appsec-wb-xray-adapters",
            "import_time": "2025-12-11T02:41:26.2228032Z",
            "modified_time": "2025-12-11T01:44:25.95319Z",
            "versions": [
                "0.1.1",
                "0.1.2",
                "0.2.0",
                "0.2.1",
                "0.2.2"
            ],
            "sha256": "eec8ca2ce80b1b742a7bf166513feb11853cee69695b15be37bf768bb56abad4",
            "source": "kam193"
        }
    ]
}
References
Credits

Affected packages

PyPI / ctosec-appsec-wb-xray-adapters

Package

Name
ctosec-appsec-wb-xray-adapters
View open source insights on deps.dev
Purl
pkg:pypi/ctosec-appsec-wb-xray-adapters

Affected ranges

Affected versions

0.*

0.1.1
0.1.2
0.2.0
0.2.1
0.2.2
0.2.3