MAL-2026-16099

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/bq-sdist-probe-vrp/MAL-2026-16099.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-16099
Published
2026-09-09T19:01:51Z
Modified
2026-09-09T19:30:05Z
Summary
Malicious code in bq-sdist-probe-vrp (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (f61d3e118672e10f0dc02115acd8235c3b356d75e7cb59a69e26fec28070c814)

setup.py executes at pip install time and performs installer-side credential and host reconnaissance. It queries the GCE/GCP metadata service at http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/token with the Metadata-Flavor: Google header to obtain the default service account's OAuth access token, service account email, and project id. It also filters os.environ for keys containing token, secret, key, pass, auth, google, project, docker, kube, or metadata substrings, and collects hostname, uid/gid/pid, the output of the id command, os.uname(), /proc/version, os.listdir('/'), and checks for /var/run/docker.sock. It performs an outbound TCP connect to 8.8.8.8:53 to test network reachability. The collected data is persisted to a JSON file inside the installed package directory. Naming (bq-sdist-probe-vrp) and behavior are consistent with a probe that harvests installer-owned cloud credentials in CI/build environments.

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "IN-MAL-2026-019894",
            "import_time": "2026-09-09T19:14:57.946655687Z",
            "modified_time": "2026-09-09T19:01:51Z",
            "sha256": "f61d3e118672e10f0dc02115acd8235c3b356d75e7cb59a69e26fec28070c814",
            "source": "amazon-inspector",
            "versions": [
                "0.0.1"
            ]
        }
    ]
}
References
Credits

Affected packages

PyPI / bq-sdist-probe-vrp

Package

Name
bq-sdist-probe-vrp
View open source insights on deps.dev
Purl
pkg:pypi/bq-sdist-probe-vrp

Affected ranges

Affected versions

0.*
0.0.1

Database specific

cwes 
[
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    }
]
indicators 
{
    "evidence_files": [
        {
            "path": "setup.py",
            "sha256": "77fbe48836ea71a5266b909380220d947548a7478f0bb5eb6ce5867b976ad35e",
            "tlsh": "8a513295ec6a4623d7d78068485cc66176237853b623a87879fcaba41fce43c8072a5e"
        }
    ],
    "package_integrity": [
        {
            "filename": "bq_sdist_probe_vrp-0.0.1.tar.gz",
            "hashes": {
                "blake2b_256": "35ffc6ec4ce2474e7e7f0347059826e5d7113a13eafa857c3a01f520cc9948cc",
                "md5": "3932cbd6a6a0e69344257fc49581e321",
                "sha256": "0f7e4304abecfcb7583c48454b1d7e7cf6526b3635fdd3566962b88dd95d77c4"
            }
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/bq-sdist-probe-vrp/MAL-2026-16099.json"