MAL-2026-11197

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/ai-perf-toolkit/MAL-2026-11197.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-11197
Published
2026-07-30T17:15:24Z
Modified
2026-08-04T22:05:24Z
Summary
Malicious code in ai-perf-toolkit (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (0fa8502570fe8566174dd7979e56a999f3ea7d6bf4f7f5a4f9f6ee579df96b83)

On import, the package's top-level init.py starts a background daemon thread that spawns xmrig via subprocess.Popen against pool.minexmr.com:4444 using a hardcoded Monero wallet address, with a pgrep guard to avoid double-launch. The package advertises itself as an 'AI Performance Toolkit' but ships no toolkit functionality — the only executed behavior is the miner launch. Any process that imports ai_perf_toolkit will silently run the miner on the installer's host, consuming CPU for the wallet embedded in the package.

Source: kam193 (41d25387636c9b0b89a404304d079c30ad28bda33bb551e551cb9e15a75c00ba)

During import, the package starts cryptomining for a hardcoded wallet. The mining software has to already be installed.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-07-ai-perf-toolkit

Reasons (based on the campaign):

  • cryptominer
Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "pypi/2026-07-ai-perf-toolkit/ai-perf-toolkit",
            "import_time": "2026-07-30T18:02:01.369717478Z",
            "modified_time": "2026-07-30T17:15:24.254305Z",
            "sha256": "41d25387636c9b0b89a404304d079c30ad28bda33bb551e551cb9e15a75c00ba",
            "source": "kam193",
            "versions": [
                "2.4.2"
            ]
        },
        {
            "id": "IN-MAL-2026-011090",
            "import_time": "2026-08-04T21:33:16.451680345Z",
            "modified_time": "2026-08-04T21:31:04Z",
            "sha256": "0fa8502570fe8566174dd7979e56a999f3ea7d6bf4f7f5a4f9f6ee579df96b83",
            "source": "amazon-inspector",
            "versions": [
                "2.4.2"
            ]
        }
    ]
}
References
Credits

Affected packages

PyPI / ai-perf-toolkit

Package

Name
ai-perf-toolkit
View open source insights on deps.dev
Purl
pkg:pypi/ai-perf-toolkit

Affected ranges

Affected versions

2.*
2.4.2

Database specific

cwes 
[
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    }
]
indicators 
{
    "evidence_files": [
        {
            "path": "ai_perf_toolkit/__init__.py",
            "sha256": "852ef0a3eb3dc2c107972ae26e995faa226b8540add7212f10c76452fb3fb2ef",
            "tlsh": "78f081d0c6ad02b1614014b76482457b87d7590bdb27c8fc787de2546f5f034411947d"
        }
    ],
    "package_integrity": [
        {
            "filename": "ai_perf_toolkit-2.4.2-py3-none-any.whl",
            "hashes": {
                "blake2b_256": "1319f53feb702484320114cd7847b5da13c0f3877f641ee8e8f56aafa43d460a",
                "md5": "a37c3f07ab86947d6cfae4327b7cab82",
                "sha256": "702d01c560b34509dbbd4fcd50573c4869d0607025cbbc71cb9e17cb82b62a7f"
            }
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/ai-perf-toolkit/MAL-2026-11197.json"