MAL-2026-15934

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/dbt-sa-cli/MAL-2026-15934.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-15934
Published
2026-09-05T05:59:33Z
Modified
2026-09-06T14:45:03Z
Summary
Malicious code in dbt-sa-cli (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (9a3fc52d1baa65bd51dd9659641f0df237ea2a595358cd91b19fd8988ba3236a)

setup.py defines rce_poc() and invokes it at module top level, so the code runs unconditionally during pip install dbt-sa-cli. The function collects installer-side identifiers (hostname, USER/USERNAME, current working directory, home path) and sends them out-of-band via a DNS lookup to a subdomain of yokodnssmamqdchvjfyqyo8zaq3s90h8e.oast.fun and an HTTPS POST to https://yokodnssmamqdchvjfyqyo8zaq3s90h8e.oast.fun/dbt-sa-cli. The same install-time path drops a marker file at ~/.dbt-sa-cli-rce-poc in the installer's home directory, demonstrating arbitrary code execution during install. The package name resembles the dbt ecosystem, making this a typosquat lure. Regardless of any 'security research' framing, installing the package produces immediate installer-side data disclosure and code execution against an author-controlled OOB collector.

Source: kam193 (23702c2370cf8873f90f85f178de5d781c9244f91fe412c952fc3cca8e98f974)

Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.

Category: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.

Campaign: GENERIC-standard-pypi-install-pentest

Reasons (based on the campaign):

  • The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.

  • The package overrides the install command in setup.py to execute malicious code during installation.

Database specific 
{
    "malicious-packages-origins":  [
        {
            "id":  "pypi/GENERIC-standard-pypi-install-pentest/dbt-sa-cli",
            "import_time":  "2026-09-05T06:27:04.669723572Z",
            "modified_time":  "2026-09-05T05:59:33.180537Z",
            "sha256":  "23702c2370cf8873f90f85f178de5d781c9244f91fe412c952fc3cca8e98f974",
            "source":  "kam193",
            "versions":  [
                "0.0.1"
            ]
        },
        {
            "id":  "IN-MAL-2026-019649",
            "import_time":  "2026-09-06T14:38:06.03921949Z",
            "modified_time":  "2026-09-06T14:28:43Z",
            "sha256":  "9a3fc52d1baa65bd51dd9659641f0df237ea2a595358cd91b19fd8988ba3236a",
            "source":  "amazon-inspector",
            "versions":  [
                "0.0.1"
            ]
        }
    ]
}
References
Credits

Affected packages

PyPI / dbt-sa-cli

Package

Name
dbt-sa-cli
View open source insights on deps.dev
Purl
pkg:pypi/dbt-sa-cli

Affected ranges

Affected versions

0.*
0.0.1

Database specific

cwes 
[
    {
        "cweId":  "CWE-506",
        "description":  "The product contains code that appears to be malicious in nature.",
        "name":  "Embedded Malicious Code"
    }
]
indicators 
{
    "evidence_files":  [
        {
            "path":  "setup.py",
            "sha256":  "4507e8ad1d81f857f8f44224df1affc1215a7152aa271703f77d743fa5b111cb",
            "tlsh":  "6d31cea2cd610832f6c2a144083642583025fa43bf81a8753eac97cc5f8e47b92a41e9"
        }
    ],
    "package_integrity":  [
        {
            "filename":  "dbt_sa_cli-0.0.1-py3-none-any.whl",
            "hashes":  {
                "blake2b_256":  "2d31df788c0e87806eecbbd219acf6f625db8b5fcae239b1ce8ba30b0d8f7ae5",
                "md5":  "94c461fb168ab9b790c1cee7df799ddd",
                "sha256":  "216e814548ce715fa11664f7ed2f639df4e5510df2df309a404e1d3a877aece0"
            }
        },
        {
            "filename":  "dbt_sa_cli-0.0.1.tar.gz",
            "hashes":  {
                "blake2b_256":  "fcf1a3d1e7613f8874ef48be576214c6992d2f30bca888269208c15039049517",
                "md5":  "77091662b7eb79646cd8572cd4e637ec",
                "sha256":  "38b8d462df6c6e72dc987da4dae49bf17648beec3eb988ce3868ecb19a5cd5b0"
            }
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/dbt-sa-cli/MAL-2026-15934.json"