MAL-2026-10919

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/ml-core-airflow-auth/MAL-2026-10919.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-10919
Published
2026-07-20T16:00:49Z
Modified
2026-07-23T07:53:03.185872972Z
Summary
Malicious code in ml-core-airflow-auth (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: kam193 (1b104d8446715fc7f59f0274ca3e655e6818b45edd837c24f78e857c917b2e6f)

Package presents little functionality, but excessive fake 'telemetry' module. This fake telemetry is used to download and run malicious executables. Code is designed to survive different blocks: first, there is an attempt to download the executable from one of five Cloudflare Workers. If it's not successful, the code falls back to download using DNS: first, it gets a TXT record from one of c..dl.well1[.]site domains, depending on the system. This record returns a number, which is then used to iterate over domains in the form <0...n>..dl.well1[.]site and reconstruct the encoded executable from their TXT records. The downloaded binary is then executed and removed afterward. Using a PTH file ensures persistence and runs on every Python start. In this campaign, versions 0.0.1 hold disarmed code (without the necessary configuration), which is completed in further updates.

This is a continuation of the 2026-07-haproxy-config-client campaign.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-07-andreiiiiiii_i

Reasons (based on the campaign):

  • The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.

  • The package overrides the install command in setup.py to execute malicious code during installation.

  • Downloads and executes a remote executable.

  • covering-tracks

  • persistence

  • abuses-pth

  • data-stored-in-dns

Database specific 
{
    "malicious-packages-origins": [
        {
            "sha256": "1b104d8446715fc7f59f0274ca3e655e6818b45edd837c24f78e857c917b2e6f",
            "modified_time": "2026-07-20T16:00:50.041946Z",
            "id": "pypi/2026-07-andreiiiiiii_i/ml-core-airflow-auth",
            "source": "kam193",
            "versions": [
                "0.0.1"
            ],
            "import_time": "2026-07-20T17:01:49.034402884Z"
        }
    ],
    "iocs": {
        "domains": [
            "package-proxy.cf8oobworker.workers.dev",
            "package-proxy.cf5oobworker.workers.dev",
            "package-proxy.cf25-6eb.workers.dev",
            "package-proxy.cf17-ddb.workers.dev",
            "win.dl.well1.site",
            "tina.dl.well1.site",
            "tin.dl.well1.site",
            "ldr.dl.well1.site"
        ]
    }
}
References
Credits

Affected packages

PyPI / ml-core-airflow-auth

Package

Name
ml-core-airflow-auth
View open source insights on deps.dev
Purl
pkg:pypi/ml-core-airflow-auth

Affected ranges

Affected versions

0.*
0.0.1

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/ml-core-airflow-auth/MAL-2026-10919.json"