MAL-2026-15827

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/company-sdk/MAL-2026-15827.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-15827
Published
2026-09-03T00:57:34Z
Modified
2026-09-03T03:15:04.889909808Z
Summary
Malicious code in company-sdk (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (46a5156bc1c582f0be8c1c33340b338cba12276dd9ea90235210fbc2ff950c85)

companysdk.py executes credential-harvesting code at module import time. It walks the installer's home directory reading SSH keys (~/.ssh), cloud credentials (~/.aws, ~/.azure, ~/.config/gcloud), package manager tokens (~/.npmrc, ~/.pypirc, ~/.netrc, ~/.pgpass), Docker/Kube configs,.env files, Vault/Terraform tokens, and shell history, and enumerates process environment variables whose names match credential keywords (TOKEN, SECRET, KEY, PASSWORD, AWS, GITHUB_, etc.). The collected material is gzip-compressed, XOR-encrypted with a keystream derived via PBKDF2-HMAC-SHA256 from a hardcoded 32-byte hex passphrase, HMAC-tagged, and base64-encoded. The drop() function then POSTs the encrypted blob to https://api.github.com/gists using a hardcoded ghp-prefixed GitHub Personal Access Token as the Bearer credential, with TLS verification explicitly disabled (ssl.CERT_NONE). The upload runs unconditionally on import inside a bare try/except so failures are silent. Using GitHub Gist as the drop channel routes the exfiltration through a domain that typically bypasses egress filtering, and encrypting the payload with an author-only key conceals contents from network inspection.

Source: kam193 (f4b45f8532bf4a1b0b6a1b987a12b2ab7e4b626351b48bfffb159beed150983e)

During import, package exfiltrates sensitive files, credentials and env variables to a private GitHub Gist.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-09-company-sdk

Reasons (based on the campaign):

  • exfiltration-env-variables

  • files-exfiltration

  • exfiltration-credentials

  • exfiltration-ssh-keys

Database specific 
{
    "malicious-packages-origins": [
        {
            "import_time": "2026-09-03T01:33:35.652333375Z",
            "source": "kam193",
            "versions": [
                "0.0.1"
            ],
            "id": "pypi/2026-09-company-sdk/company-sdk",
            "modified_time": "2026-09-03T00:57:34.884097Z",
            "sha256": "f4b45f8532bf4a1b0b6a1b987a12b2ab7e4b626351b48bfffb159beed150983e"
        },
        {
            "import_time": "2026-09-03T03:02:47.332769358Z",
            "source": "amazon-inspector",
            "versions": [
                "0.0.1"
            ],
            "id": "IN-MAL-2026-019363",
            "modified_time": "2026-09-03T01:33:16Z",
            "sha256": "46a5156bc1c582f0be8c1c33340b338cba12276dd9ea90235210fbc2ff950c85"
        }
    ]
}
References
Credits

Affected packages

PyPI / company-sdk

Package

Name
company-sdk
View open source insights on deps.dev
Purl
pkg:pypi/company-sdk

Affected ranges

Affected versions

0.*
0.0.1

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/company-sdk/MAL-2026-15827.json"
indicators 
{
    "evidence_files": [
        {
            "path": "company_sdk.py",
            "tlsh": "00a1d897a8e59c92a31b234c6c87c4a077756a6f0c443a64349dfe446f8c43e01b3b5d",
            "sha256": "5790fefd145ab8756f97f9a5d0835889a071e5f47efffa045c290a1bbbad992b"
        }
    ],
    "package_integrity": [
        {
            "filename": "company_sdk-0.0.1-py3-none-any.whl",
            "hashes": {
                "sha256": "c930756d478077cc66a840db16d3933179b36fd5b0c3e5908093f648828c8a5b",
                "blake2b_256": "e47f125645bb51fd9d96a177b6b1839ce572d85b1ac1ad2d700d977c763b3b5a",
                "md5": "dea939433370489607f253305374f997"
            }
        },
        {
            "filename": "company_sdk-0.0.1.tar.gz",
            "hashes": {
                "sha256": "4be058f4f5a11553fd079115596c3fbfc069ed353e9900f704461a1f1d402997",
                "blake2b_256": "34669be62d0de19de8b6de9d613385294550cacc751b00dfebae4d8d9d415c89",
                "md5": "9b1875878bcae26cece0397e8abf9f47"
            }
        }
    ]
}
cwes 
[
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code"
    }
]