MAL-2026-16240

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/praetorian-mind-rce-test-2026/MAL-2026-16240.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-16240
Published
2026-09-16T17:30:57Z
Modified
2026-09-17T14:30:05Z
Summary
Malicious code in praetorian-mind-rce-test-2026 (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (a7a16a607fd396ce7218fb45728cb3ca55f541326c83a063668a7a170b46acc1)

At pip install time, setup.py calls a phone_home() routine at module top-level before setup() runs. The routine collects extensive host and container reconnaissance — hostname, uid/gid, uname, /etc/resolv.conf, /etc/hosts, /proc/self/cgroup, mount output, ps aux, directory listings of /, /app, /home — and serializes the complete process environment via {k: v for k, v in sorted(os.environ.items())}. When ECS_CONTAINER_METADATA_URI_V4 is present, it additionally fetches ECS container and task metadata (which exposes IAM task-role context useful for credential abuse). The aggregated JSON payload is POSTed via urllib.request.urlopen to the hardcoded non-publisher endpoint https://5h6gijnewx787zu6.ixx.sh. The full-environment dump routinely contains CI, cloud, and registry credentials (AWS_*, tokens, secrets), and the ECS metadata read enables IAM role abuse against the installer's cloud account.

Source: kam193 (f9a677a1b1a8762a3f01e91a8da196298bf146b255dc7f9d834842916882372b)

During installation, package exfiltrates environment variables, tokens from cloud environments and fingerprints the environment. It identifies itself as a security testing engagement.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-09-praetorian-mind-rce-test-2026

Reasons (based on the campaign):

  • exfiltration-env-variables

  • The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.

  • exfiltration-cloud-tokens

Source: ossf-package-analysis (48d3d63e8f3773e745ea3c4961c8d598e880db130cf063cc738a381080c2b782)

The OpenSSF Package Analysis project identified 'praetorian-mind-rce-test-2026' @ 0.0.2 (pypi) as malicious.

It is considered malicious because:

  • The package executes one or more commands associated with malicious behavior.
Database specific 
{
    "iocs": {
        "domains": [
            "5h6gijnewx787zu6.ixx.sh"
        ]
    },
    "malicious-packages-origins": [
        {
            "id": "pypi/2026-09-praetorian-mind-rce-test-2026/praetorian-mind-rce-test-2026",
            "import_time": "2026-09-16T18:21:17.28792775Z",
            "modified_time": "2026-09-16T17:48:15.248174Z",
            "sha256": "f9a677a1b1a8762a3f01e91a8da196298bf146b255dc7f9d834842916882372b",
            "source": "kam193",
            "versions": [
                "0.0.1",
                "0.0.2",
                "0.0.3"
            ]
        },
        {
            "import_time": "2026-09-16T21:38:33.771629887Z",
            "modified_time": "2026-09-16T17:30:57Z",
            "sha256": "48d3d63e8f3773e745ea3c4961c8d598e880db130cf063cc738a381080c2b782",
            "source": "ossf-package-analysis",
            "versions": [
                "0.0.2"
            ]
        },
        {
            "id": "IN-MAL-2026-020116",
            "import_time": "2026-09-17T14:20:22.960837894Z",
            "modified_time": "2026-09-17T14:12:21Z",
            "sha256": "f8761f49af52ce51fadd4f915a64844944ce12a082c476cceae06c592d6b5856",
            "source": "amazon-inspector",
            "versions": [
                "0.0.1"
            ]
        },
        {
            "id": "IN-MAL-2026-020111",
            "import_time": "2026-09-17T14:20:22.724442295Z",
            "modified_time": "2026-09-17T14:10:38Z",
            "sha256": "a7a16a607fd396ce7218fb45728cb3ca55f541326c83a063668a7a170b46acc1",
            "source": "amazon-inspector",
            "versions": [
                "0.0.3"
            ]
        },
        {
            "id": "IN-MAL-2026-020112",
            "import_time": "2026-09-17T14:20:22.783095902Z",
            "modified_time": "2026-09-17T14:10:49Z",
            "sha256": "ad8685ec1ec1506ec83f955a3232722451dfdbd1b7e902fb6c4cb5352164e8ed",
            "source": "amazon-inspector",
            "versions": [
                "0.0.2"
            ]
        }
    ]
}
References
Credits

Affected packages

PyPI / praetorian-mind-rce-test-2026

Package

Name
praetorian-mind-rce-test-2026
View open source insights on deps.dev
Purl
pkg:pypi/praetorian-mind-rce-test-2026

Affected ranges

Affected versions

0.*
0.0.1
0.0.2
0.0.3

Database specific

cwes 
[
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    }
]
indicators 
{
    "evidence_files": [
        {
            "path": "setup.py",
            "sha256": "fd9335b12c264b7ceb3cd8ac0afdc26665e760bf644562d5fa1586d21fa9f0be",
            "tlsh": "e2210ec2c42a252365cb52905c6356187327aa072f02bd663dee32489f8f42d81ba69d"
        }
    ],
    "package_integrity": [
        {
            "filename": "praetorian_mind_rce_test_2026-0.0.1-py3-none-any.whl",
            "hashes": {
                "blake2b_256": "8b549773489c8c5ebce610e8c233c2f557e80646470475bd213e783b1074557e",
                "md5": "ea3f03da8633c7c380bd4bbd5886df54",
                "sha256": "9e63b30030e28703fa0c51191e62415dff2aedd8943ca3678077be3eba69b09b"
            }
        },
        {
            "filename": "praetorian_mind_rce_test_2026-0.0.1.tar.gz",
            "hashes": {
                "blake2b_256": "096eefa4c547f148946218125e23c6fc40dbe1fe79d5a2c547e13ff1ba45e773",
                "md5": "e9998517835c218c20fd5eccfc8dd20a",
                "sha256": "f3cd5048cdc5b55141602b2f00c37bbd9cc2ae5da589383df7cfef0c2bae1adc"
            }
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/praetorian-mind-rce-test-2026/MAL-2026-16240.json"