MAL-2026-15926

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/astlsi/MAL-2026-15926.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-15926
Published
2026-09-04T10:24:22Z
Modified
2026-09-04T21:30:08.867303843Z
Summary
Malicious code in astlsi (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (222a62d677f99497f67476b9cc87886c05fb2a08827430934fb518798abb8339)

The package presents itself as a proxy health-check utility, but its exported starts() function walks /storage/emulated/0/ (Android user-storage), collects files with source/document extensions (.py,.json,.txt,.html,.php), packs them into a zip archive, and POSTs the archive to https://tapi.bale.ai/<bot-token>/sendDocument with chat_id 5263487757. The Bale bot token and chat id are hardcoded in the module. The proxy-latency scaffolding around this call performs no real proxy check and serves as a cover story for the single exfiltration request.

Source: kam193 (902508cd9285413782c405b438e21f1f29787d38aba7badf71aeb4e0b632b9b6)

The provided functionality hides code that exfiltrates files to a remote location.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-09-asti

Reasons (based on the campaign):

  • files-exfiltration

  • action-hidden-in-lib-usage

  • target:android

Database specific 
{
    "malicious-packages-origins": [
        {
            "import_time": "2026-09-04T11:16:20.228063684Z",
            "id": "pypi/2026-09-asti/astlsi",
            "versions": [
                "0.1.0"
            ],
            "source": "kam193",
            "modified_time": "2026-09-04T10:24:22.871944Z",
            "sha256": "902508cd9285413782c405b438e21f1f29787d38aba7badf71aeb4e0b632b9b6"
        },
        {
            "import_time": "2026-09-04T21:15:20.962515799Z",
            "id": "IN-MAL-2026-019645",
            "versions": [
                "0.1.0"
            ],
            "source": "amazon-inspector",
            "modified_time": "2026-09-04T21:04:00Z",
            "sha256": "222a62d677f99497f67476b9cc87886c05fb2a08827430934fb518798abb8339"
        }
    ]
}
References
Credits

Affected packages

PyPI / astlsi

Package

Name
astlsi
View open source insights on deps.dev
Purl
pkg:pypi/astlsi

Affected ranges

Affected versions

0.*
0.1.0

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/astlsi/MAL-2026-15926.json"
indicators 
{
    "evidence_files": [
        {
            "path": "astlsi/starts.py",
            "tlsh": "f2b21f10ec552865d39b9c7ee846e243222f9c17028d7c24b1fc82dc5f35ab695e6cf9",
            "sha256": "f9364154bda53b317ae4cc3abab255c36e2b5947552d65da560ba62e09590794"
        }
    ],
    "package_integrity": [
        {
            "filename": "astlsi-0.1.0-py3-none-any.whl",
            "hashes": {
                "sha256": "ceeb1262d0c8311e3a872c78a51b8a34571f7af28311f1c0218565c07227845c",
                "blake2b_256": "cc157bb70d4549edcaad60449847ed311bb06415eb40df05944cdb43255a1b55",
                "md5": "ec6862623e3886ae490b6db20bd42e01"
            }
        },
        {
            "filename": "astlsi-0.1.0.tar.gz",
            "hashes": {
                "sha256": "d30dd793438aa05dc23380651a19a878e5a8a56738920eed8a046a8a04f36e64",
                "blake2b_256": "34aa98a7300e6b38d2906ccf9f2668b6b18ece6522e85f08ff777633bb36c88e",
                "md5": "02305a642cd29db00d6bca66dde157cd"
            }
        }
    ]
}
cwes 
[
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code"
    }
]