MAL-2026-17168

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/vercel-runtime-python/MAL-2026-17168.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-17168
Published
2026-09-24T23:23:58Z
Modified
2026-09-25T03:00:06Z
Summary
Malicious code in vercel-runtime-python (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (f59b48451cf996ea42b291d60ed56205aeb9803222d156f7880fd6b92032b1c6)

The package presents itself as a Vercel Python runtime helper but ships no runtime functionality. Its only substantive code path is a public function send_info() that gathers hostname, resolved IP, operating system, and machine architecture via get_device_info() and POSTs the result as JSON to the hardcoded URL https://webhook.site/f9bff304-3053-4d54-be05-86537267514a. The destination is not caller-configurable, is not documented, and is not associated with Vercel. Any consumer that invokes the advertised API silently discloses host reconnaissance data to an attacker-controlled webhook.site inbox. The typosquat-shaped name (mimicking an official Vercel component) combined with a module surface consisting solely of host-info collection and outbound POST is consistent with reconnaissance-oriented installer targeting rather than a legitimate runtime library.

Source: kam193 (5bd13c006fe4fbaf8bb81d068f6e3c822ea1e664b24d0045370aead862ccd06f)

Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.

Category: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.

Campaign: GENERIC-standard-pypi-install-pentest

Reasons (based on the campaign):

  • The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.

  • The package overrides the install command in setup.py to execute malicious code during installation.

Database specific 
{
    "malicious-packages-origins":  [
        {
            "id":  "pypi/GENERIC-standard-pypi-install-pentest/vercel-runtime-python",
            "import_time":  "2026-09-24T23:38:09.361576484Z",
            "modified_time":  "2026-09-24T23:23:58.137607Z",
            "sha256":  "5bd13c006fe4fbaf8bb81d068f6e3c822ea1e664b24d0045370aead862ccd06f",
            "source":  "kam193",
            "versions":  [
                "0.1.0",
                "99.99.99",
                "100.99.99",
                "100.100.99"
            ]
        },
        {
            "id":  "IN-MAL-2026-020554",
            "import_time":  "2026-09-25T02:45:29.19721983Z",
            "modified_time":  "2026-09-25T02:42:16Z",
            "sha256":  "8baaac3afcab2fdb8d268149c8ac31706f823b80e1856790330f30236de69678",
            "source":  "amazon-inspector",
            "versions":  [
                "99.99.99"
            ]
        },
        {
            "id":  "IN-MAL-2026-020552",
            "import_time":  "2026-09-25T02:45:29.139317999Z",
            "modified_time":  "2026-09-25T02:41:59Z",
            "sha256":  "f59b48451cf996ea42b291d60ed56205aeb9803222d156f7880fd6b92032b1c6",
            "source":  "amazon-inspector",
            "versions":  [
                "0.1.0"
            ]
        },
        {
            "id":  "IN-MAL-2026-020549",
            "import_time":  "2026-09-25T02:45:29.0587284Z",
            "modified_time":  "2026-09-25T02:41:33Z",
            "sha256":  "4cc49f07c3e7479da82db0a24f0580167564acd727f34853e1d698f7dc71b65e",
            "source":  "amazon-inspector",
            "versions":  [
                "100.99.99"
            ]
        },
        {
            "id":  "IN-MAL-2026-020546",
            "import_time":  "2026-09-25T02:45:28.971694083Z",
            "modified_time":  "2026-09-25T02:41:06Z",
            "sha256":  "860cd14ddffeffe03e86385355e6b60ec25cf8cd8bc688bfb16b233ad89097c9",
            "source":  "amazon-inspector",
            "versions":  [
                "100.100.99"
            ]
        }
    ]
}
References
Credits

Affected packages

PyPI / vercel-runtime-python

Package

Name
vercel-runtime-python
View open source insights on deps.dev
Purl
pkg:pypi/vercel-runtime-python

Affected ranges

Affected versions

0.*
0.1.0
99.*
99.99.99
100.*
100.99.99
100.100.99

Database specific

cwes 
[
    {
        "cweId":  "CWE-506",
        "description":  "The product contains code that appears to be malicious in nature.",
        "name":  "Embedded Malicious Code"
    },
    {
        "cweId":  "CWE-506",
        "description":  "The product contains code that appears to be malicious in nature.",
        "name":  "Embedded Malicious Code"
    },
    {
        "cweId":  "CWE-506",
        "description":  "The product contains code that appears to be malicious in nature.",
        "name":  "Embedded Malicious Code"
    },
    {
        "cweId":  "CWE-506",
        "description":  "The product contains code that appears to be malicious in nature.",
        "name":  "Embedded Malicious Code"
    }
]
indicators 
{
    "evidence_files":  [
        {
            "path":  "vercel_runtime_python/index.py",
            "sha256":  "6ab7560e4ef68504634461bbda88421e0bd94e3c56cea3e30d5f18fb8e880cb2",
            "tlsh":  "c411c0269d92c941873540cc8c4295c6f716972b6f65ad2bfefc43596f3101093b057e"
        }
    ],
    "package_integrity":  [
        {
            "filename":  "vercel_runtime_python-99.99.99-py3-none-any.whl",
            "hashes":  {
                "blake2b_256":  "f68457e7658730b82b7f16d7a841b7d8640076739bc95a6470da070ca37a83e6",
                "md5":  "e8ee8e82b7760ce500f5674defdccd7d",
                "sha256":  "1a6e94ac49be7e10b520710d59b3228f0ccc40a5ca878fcf5eb29f19e594d381"
            }
        },
        {
            "filename":  "vercel_runtime_python-99.99.99.tar.gz",
            "hashes":  {
                "blake2b_256":  "c3d8a0d54583e12843375ff18bd189ffda447c4234da1dde58b4056d439c11d0",
                "md5":  "93ce406beedde0f1dc4ede371be2e05c",
                "sha256":  "57b02e59ebf7163697735dbe9fc302b3239c04b4aa4f78bb8fcf09b577b90ea7"
            }
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/vercel-runtime-python/MAL-2026-17168.json"