MAL-2026-14587

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/pygame-renderkit/MAL-2026-14587.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-14587
Published
2026-08-28T09:55:47Z
Modified
2026-08-29T12:30:09.786996148Z
Summary
Malicious code in pygame-renderkit (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (fdef1a055b3059d56581d5c0d33538e7799cfde5e42d596eb50094d06d984f54)

setup.py registers a custom install command that forks a daemonized child during pip install and executes a base64-encoded Python payload via exec(compile(...)). The decoded payload connects to a hardcoded C2 host at 5uj0a8ziyu.localto.net:3900 and provides an interactive reverse shell by duplicating the socket onto stdin/stdout/stderr of /bin/bash (via pty.spawn) or /bin/sh -i, with a 15-second reconnect loop. It also enumerates environment variables matching API, TOKEN, KEY, SECRET, PASS, CRED, AUTH, AWS, AZURE, GCP, OPENAI, ANTHROPIC, and MANUS, reads /etc/passwd, /etc/sudoers, /etc/shadow, ~/.bashhistory, and /opt/.manus/current/config, and sends the collected data over TCP to the same host framed with [EXFIL]/[ENDEXFIL] markers. Persistence is established by writing /tmp/.rkrecon.py, installing a per-minute crontab entry, dropping a renderkit.service systemd user unit with Restart=always, and writing /etc/sudoers.d/.renderkit granting the current user NOPASSWD: ALL. The payload is stored as a base64-encoded template with %%HOST%%/%%PORT%% placeholders and the installer forks with startnewsession=True to hide from pip output. The package presents as a pygame utility; none of this behavior matches that stated purpose.

Source: kam193 (5856daeb3070a9b2a6ffc42d8999ff49c63706ccb27ee683e5fcc4ff175f78f9)

During installation, the package attempts to exfiltrate sensitive environment variables and files, establish persistence and open reverse shell.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-08-pygame-renderkit

Reasons (based on the campaign):

  • persistence

  • The package overrides the install command in setup.py to execute malicious code during installation.

  • The package contains code to create a reverse shell, allowing an attacker to execute any commands on the victim's machine.

  • files-exfiltration

  • exfiltration-env-variables

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "pypi/2026-08-pygame-renderkit/pygame-renderkit",
            "modified_time": "2026-08-28T09:55:47.226508Z",
            "import_time": "2026-08-28T10:38:59.563679787Z",
            "source": "kam193",
            "sha256": "5856daeb3070a9b2a6ffc42d8999ff49c63706ccb27ee683e5fcc4ff175f78f9",
            "versions": [
                "1.2.0"
            ]
        },
        {
            "id": "IN-MAL-2026-018804",
            "source": "amazon-inspector",
            "import_time": "2026-08-28T19:33:50.163054566Z",
            "modified_time": "2026-08-28T16:43:31Z",
            "sha256": "fdef1a055b3059d56581d5c0d33538e7799cfde5e42d596eb50094d06d984f54",
            "versions": [
                "1.2.0"
            ]
        },
        {
            "id": "pypi/2026-08-pygame-renderkit/pygame-renderkit",
            "source": "kam193",
            "import_time": "2026-08-29T12:23:15.012408983Z",
            "modified_time": "2026-08-28T09:55:47.226508Z",
            "sha256": "039ea05d12048144a31dfde021c4b725fbceb2634d816cca4a97776bc2c55140",
            "versions": [
                "1.2.0"
            ]
        }
    ],
    "iocs": {
        "domains": [
            "5uj0a8ziyu.localto.net"
        ]
    }
}
References
Credits

Affected packages

PyPI / pygame-renderkit

Package

Name
pygame-renderkit
View open source insights on deps.dev
Purl
pkg:pypi/pygame-renderkit

Affected ranges

Affected versions

1.*
1.2.0

Database specific

cwes 
[
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    }
]
indicators 
{
    "package_integrity": [
        {
            "filename": "pygame_renderkit-1.2.0-py3-none-any.whl",
            "hashes": {
                "md5": "88fd83e2478825d7f07f68f7bf23fe7e",
                "blake2b_256": "4c8dd740c2ea9776c89c059449e28d532c505823e02b9ad8265c320fc17bdc36",
                "sha256": "3dfb0db9f896161286b54dcd498f487caa79d5cee1499654e84991dff73ac2e6"
            }
        },
        {
            "filename": "pygame_renderkit-1.2.0.tar.gz",
            "hashes": {
                "md5": "2159afa43a753fea6577d1cfcedec980",
                "blake2b_256": "92b64748449078ce86e6f7d88fbb56965078d39bc41e852c6b34776373904f65",
                "sha256": "2bea5d7ee5dd2eef24485a804bc0badc240157b14a67e5f3c6e3765eb6675a69"
            }
        }
    ],
    "evidence_files": [
        {
            "path": "setup.py",
            "tlsh": "86f1b696c9891134d7d38677201a9541169bb4279f0768b47ffc8340dfce37911b93ba",
            "sha256": "83c3b28f0de6d30aceaf2fac3b115a37590aae1414484cc23a26999a5b485500"
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/pygame-renderkit/MAL-2026-14587.json"