MAL-2026-16242

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/trongappy/MAL-2026-16242.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-16242
Published
2026-09-16T19:09:57Z
Modified
2026-09-17T14:30:05Z
Summary
Malicious code in trongappy (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (145727605bb141edc0fa9697253b211a1b0e467db2a484a2cedd163bcc6df1b7)

The package exposes a single public function perm(private_key) that POSTs its private_key argument as JSON to the hardcoded URL https://reda-sequestered-justine.ngrok-free.dev/tron and then queries a /switcher endpoint on the same host. The destination is an author-controlled ngrok tunnel with no caller configuration, no documentation of the network relay, and no legitimate reason for a Tron helper to transmit a wallet secret off-host. Any caller who invokes the documented API surrenders full control of the corresponding wallet to the operator of that endpoint. Package metadata further indicates a throwaway publish: setup.py declares package_data for a pyarmor_runtime_000000/* directory that is not shipped, project_urls['Source Repository'] points to an unrelated GitHub account with a placeholder #replace with your github source comment, and the author contact is a generic gmail address.

Source: kam193 (91ef2777a3657922888663423a9cadfbad9e4366473b5c7c4e03a7608e49fa36)

Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX (Tron / Tronix). Some packages additionally clone the readme of other, legit libraries. The similar packages are repeating uploaded to PyPI

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2025-04-tronix

Reasons (based on the campaign):

  • exfiltration-generic

  • crypto-related

Database specific 
{
    "iocs": {
        "domains": [
            "68076f26e81df7060eba3e58.mockapi.io",
            "66c0dc0bba6f27ca9a57c4bf.mockapi.io",
            "67b9f37c51192bd378dee810.mockapi.io",
            "reda-sequestered-justine.ngrok-free.dev"
        ]
    },
    "malicious-packages-origins": [
        {
            "id": "pypi/2025-04-tronix/trongappy",
            "import_time": "2026-09-16T19:37:53.636369723Z",
            "modified_time": "2026-09-16T19:10:33.117533Z",
            "sha256": "91ef2777a3657922888663423a9cadfbad9e4366473b5c7c4e03a7608e49fa36",
            "source": "kam193",
            "versions": [
                "0.0.1"
            ]
        },
        {
            "id": "IN-MAL-2026-020118",
            "import_time": "2026-09-17T14:20:23.077610289Z",
            "modified_time": "2026-09-17T14:12:43Z",
            "sha256": "145727605bb141edc0fa9697253b211a1b0e467db2a484a2cedd163bcc6df1b7",
            "source": "amazon-inspector",
            "versions": [
                "0.0.1"
            ]
        }
    ]
}
References
Credits

Affected packages

PyPI / trongappy

Package

Name
trongappy
View open source insights on deps.dev
Purl
pkg:pypi/trongappy

Affected ranges

Affected versions

0.*
0.0.1

Database specific

cwes 
[
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    }
]
indicators 
{
    "evidence_files": [
        {
            "path": "trongappy/main.py",
            "sha256": "888e9bbd6807ce23eb79beb9d83d2cef96ca7987b6999f35c14842bcd9d606f2",
            "tlsh": "e0f05ca318c17410c60a7135aeda3f06419a7c3f7a0c697033cd00a2df6636419f8120"
        },
        {
            "path": "setup.py",
            "sha256": "c660def17335c2460a8b140a17b0dbeb0835ca297c8c6100509b4ba423b2ec97",
            "tlsh": "351100660c42211424bd869cac225d4ff532632b698088d7bd7c02443ff1283ff7762c"
        }
    ],
    "package_integrity": [
        {
            "filename": "trongappy-0.0.1-py3-none-any.whl",
            "hashes": {
                "blake2b_256": "8c1ff075b7c7cb181140cf5b23614b0df78fe3c18a3699d31d76708ca34bc642",
                "md5": "c435ac5fbe3f8df6e112968cd16326b4",
                "sha256": "25351f3da60d812ef9eced4cdd9dd1adbd372b0385272b46ae01067f5591770f"
            }
        },
        {
            "filename": "trongappy-0.0.1.tar.gz",
            "hashes": {
                "blake2b_256": "0a83edd9cfbdd7432610566dccfc0703e0c59bd29ec4601fb13690c01e591831",
                "md5": "6cc979ab2f897a03ffa506dd6f4b0c32",
                "sha256": "e3672be85942577563fec502822315852b3b02d789541e973e30e55a0af3c298"
            }
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/trongappy/MAL-2026-16242.json"