MAL-2026-10864

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/kimichat/MAL-2026-10864.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-10864
Published
2026-07-20T05:07:32Z
Modified
2026-08-04T23:05:48Z
Summary
Malicious code in kimichat (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (b57c88bce76fccb6cb2b3a99ef53a62402a8d56b4918ba4c7f2b634036317093)

The package presents itself as a 'Python wrapper for the bundled kimichat runtime' and exposes a kimichat-run console script plus kimichat.run(). Invoking either causes kimichat.core.run() to spawn bash on the bundled src/kimichat/resources/start.sh, which chmod+x's and executes a ~32MB bundled Linux ELF at src/kimichat/resources/kimichat. String analysis of the ELF identifies it as 'ForgeMiner/1.4.1', a stratum GPU miner with CUDA kernels for kawpow/xelis/kryptix/alpha/keryx and standard stratum verbs (mining.authorize, mining.subscribe). start.sh hardcodes the mining destination and wallet: FORGE_WALLET="prl1p2jan4dvkdfkt5r3pra7z96axrxjyjcgat9w7ldetlcy9wffm569sc9ux2t" and POOL="45.151.62.119:3361". Running the tool consumes the host's GPU and electricity and routes the mined rewards to the hardcoded author wallet; the delivered binary does not match the package's advertised purpose as a chat runtime.

Source: kam193 (1d4795d0466af3e087dba2ac688463000092f9f4fda9040a4653956a3dc2583a)

In this campaign, packages use names similar to popular services (e.g. Kimi AI) to deploy cryptominer.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-07-kimichat

Reasons (based on the campaign):

  • cryptominer
Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "pypi/2026-07-kimichat/kimichat",
            "import_time": "2026-07-20T06:05:22.552899283Z",
            "modified_time": "2026-07-20T05:07:33.120855Z",
            "sha256": "1d4795d0466af3e087dba2ac688463000092f9f4fda9040a4653956a3dc2583a",
            "source": "kam193",
            "versions": [
                "0.1.0",
                "0.1.1"
            ]
        },
        {
            "id": "pypi/2026-07-kimichat/kimichat",
            "import_time": "2026-07-20T20:04:39.242923131Z",
            "modified_time": "2026-07-20T05:07:33.120855Z",
            "sha256": "dd54b31f9655bf3fdce1f88945d472f25a93b3da9ecc8b4370025842aa82689a",
            "source": "kam193",
            "versions": [
                "0.1.0",
                "0.1.1"
            ]
        },
        {
            "id": "IN-MAL-2026-011104",
            "import_time": "2026-08-04T22:29:59.519355151Z",
            "modified_time": "2026-08-04T21:33:02Z",
            "sha256": "59d3c008ba7e9dad4a57424b2ded5748db91362d8a7b5bb6b9d3e2bceefe262c",
            "source": "amazon-inspector",
            "versions": [
                "0.1.0"
            ]
        },
        {
            "id": "IN-MAL-2026-011105",
            "import_time": "2026-08-04T22:29:59.577277902Z",
            "modified_time": "2026-08-04T21:33:11Z",
            "sha256": "b57c88bce76fccb6cb2b3a99ef53a62402a8d56b4918ba4c7f2b634036317093",
            "source": "amazon-inspector",
            "versions": [
                "0.1.1"
            ]
        }
    ]
}
References
Credits

Affected packages

PyPI / kimichat

Package

Name
kimichat
View open source insights on deps.dev
Purl
pkg:pypi/kimichat

Affected ranges

Affected versions

0.*
0.1.0
0.1.1

Database specific

cwes 
[
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    }
]
indicators 
{
    "evidence_files": [
        {
            "path": "src/kimichat/resources/start.sh",
            "sha256": "7ba655eb6b7d981c901657be694411305612b5f404eb3734798d5ac10f7ce948",
            "tlsh": "223142c36e040631551eb7286906b9ca5e5830775a8b36a9b7cd77b1a30fba84522cf2"
        },
        {
            "path": "pyproject.toml",
            "sha256": "7c8aa199409634dc910bf069966bdc19b1a8bee3e0423781af094b31ff36371a",
            "tlsh": "4af08b23cf77ad6099d211050028c081eb916414269260fca6c7d26800dd1dbc6dcc3a"
        }
    ],
    "package_integrity": [
        {
            "filename": "kimichat-0.1.0-py3-none-any.whl",
            "hashes": {
                "blake2b_256": "409ede1c605aa538d0144d6733dd501268158210414d6b25f8d2781deafc2645",
                "md5": "ba4eaea8d0e795ba53123d8b701f810b",
                "sha256": "72e7041783382deda84c968c2abbc7b77a94aef9b4b69c1815c22610b6c8eb54"
            }
        },
        {
            "filename": "kimichat-0.1.0.tar.gz",
            "hashes": {
                "blake2b_256": "8a8a0236013fb93b4be8fb9cda95ae08e0bd3b7bf278fdfd8a41c97b3c793851",
                "md5": "951f6a4ff49b6c2313c63014afa976ea",
                "sha256": "8d1539eec1fcd4efe71b289639a3588a3d391a930de16710986e8ed602c4dde1"
            }
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/kimichat/MAL-2026-10864.json"