MAL-2026-14384

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/mlflow-otel-instrumentor/MAL-2026-14384.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2026-14384

Published

2026-08-23T17:37:53Z

Modified

2026-08-24T05:30:16.062035160Z

Summary

Malicious code in mlflow-otel-instrumentor (PyPI)

Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (b08cc23ea60cf80f9bf13850e8222ee1cbb7a89643362c703eb402eef08d908c)

Package metadata impersonates AWS (author "AWS Support Team", email support@aws.com, homepage https://aws.amazon.com/) while the actual payload is fetched from an unrelated throwaway host. A custom setuptools install command writes a shell script into a temp directory that sleeps ~300 seconds, downloads an ELF binary from https://file.freestorage-04.bond/files/.../boto3_utils.elf via curl/wget, chmod +x's it, executes it detached via nohup as /tmp/systemd-helper, and then self-deletes the launcher script. Installing the package results in an unsigned, non-publisher ELF running as a background process on the installer's host with no relationship to the advertised AWS-support functionality.

Source: kam193 (596b37cefcfec9359e87bfd5663962ce80c05c8851c4f894b6b4ea294ee0bbfd)

During installation package downloads and executes an executable. The remote executable appears to be broken but suggests intentions for persistence via systemd services, cryptocurrency mining and propagating over the network. Campaign shows some similarities with 2026-08-boto4

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-08-mlflow-otel-instrumentor

Reasons (based on the campaign):

typosquatting
Downloads and executes a remote executable.
worm
persistence
network-scan
cryptominer

Database specific

{
    "malicious-packages-origins": [
        {
            "modified_time": "2026-08-23T17:37:53.590974Z",
            "sha256": "596b37cefcfec9359e87bfd5663962ce80c05c8851c4f894b6b4ea294ee0bbfd",
            "versions": [
                "1.1.0"
            ],
            "source": "kam193",
            "id": "pypi/2026-08-mlflow-otel-instrumentor/mlflow-otel-instrumentor",
            "import_time": "2026-08-23T18:09:05.110615325Z"
        },
        {
            "sha256": "b08cc23ea60cf80f9bf13850e8222ee1cbb7a89643362c703eb402eef08d908c",
            "modified_time": "2026-08-24T05:05:32Z",
            "versions": [
                "1.1.0"
            ],
            "source": "amazon-inspector",
            "id": "IN-MAL-2026-018596",
            "import_time": "2026-08-24T05:20:13.140375137Z"
        }
    ],
    "iocs": {
        "urls": [
            "https://file.freestorage-04.bond/files/2026/8/23/10fef88e-73a5-4262-90b8-6585724390e6/boto3_utils.elf?srl=3wyvEAZhXsu6vRNBWi1bug&exp=1787506002"
        ]
    }
}

References

Credits

- Amazon Inspector - FINDER
- - inspector-research@amazon.com
- Kamil Mańkowski (kam193) - REPORTER
- - https://github.com/kam193
  - https://bad-packages.kam193.eu/

Affected packages

PyPI / mlflow-otel-instrumentor

Package

Name: mlflow-otel-instrumentor; View open source insights on deps.dev
Purl: pkg:pypi/mlflow-otel-instrumentor

Affected ranges

Affected versions

1.*

1.1.0

Database specific

cwes

[
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    }
]

source

"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/mlflow-otel-instrumentor/MAL-2026-14384.json"

indicators

{
    "evidence_files": [
        {
            "path": "setup.py",
            "sha256": "b5d16e9368e9479a5315b179bc4d3358479430b6f2c863e8b44a0f92fd753d15",
            "tlsh": "1b312292cd5525301ec343911513681122a5b523ff45fdc834cc4a640f8a979cba4f7f"
        }
    ],
    "package_integrity": [
        {
            "hashes": {
                "blake2b_256": "df1e700c30a088ccf3c3a188f74f10781f2a9062d118c6f168f45a323214c4f6",
                "sha256": "45f8abd7e9f9e9fd9b76dbdd03a70840af518945bb1d5ee3f3585c4a85eeafc7",
                "md5": "8bb316632e2ee9aea05a6dc09f6d7ab5"
            },
            "filename": "mlflow_otel_instrumentor-1.1.0.tar.gz"
        }
    ]
}