MAL-2026-17193

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/metrio/MAL-2026-17193.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-17193
Published
2026-09-27T07:06:20Z
Modified
2026-09-30T01:45:10Z
Summary
Malicious code in metrio (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (ce8ee66a844d7abed74f4b9d223c8ef8f35bae380104526f4f8bc57295c47320)

metrio 999.0.0 executes a hostname-exfiltration beacon from both setup.py (install time) and metrio/init.py (import time). The code reads the local machine's hostname, hex-encodes it, and embeds it as a subdomain of the attacker-controlled domain 84avt3516s4q1obsv9q0mh4u2l8dw3ks.x9.to, then triggers a DNS resolution via socket.gethostbyname and a plain-HTTP GET via urllib.request.urlopen against that host. The version number 999.0.0 and the self-described 'dependency-confusion PoC placeholder' summary are the canonical high-version dependency-confusion shape: the package is intended to win resolution against an internal package of the same name and beacon the resolving host back to the operator. Installer harm on pip install metrio or import metrio is disclosure of the installer's hostname to a third-party collector, and confirmation to the operator that this internal name resolves to the public index from the installer's build environment.

Source: kam193 (f7b0289ef68f815e0fd296282739990dfc918c0070fb5acdae2787ca8eba23f3)

Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.

Category: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.

Campaign: GENERIC-standard-pypi-install-pentest

Reasons (based on the campaign):

  • The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.

  • The package overrides the install command in setup.py to execute malicious code during installation.

Database specific 
{
    "malicious-packages-origins":  [
        {
            "id":  "pypi/GENERIC-standard-pypi-install-pentest/metrio",
            "import_time":  "2026-09-27T07:20:13.937865275Z",
            "modified_time":  "2026-09-27T07:06:20.021767Z",
            "sha256":  "f7b0289ef68f815e0fd296282739990dfc918c0070fb5acdae2787ca8eba23f3",
            "source":  "kam193",
            "versions":  [
                "999.0.0",
                "1000.0.0",
                "1001.0.0"
            ]
        },
        {
            "id":  "IN-MAL-2026-020580",
            "import_time":  "2026-09-28T15:19:57.437021442Z",
            "modified_time":  "2026-09-28T15:05:16Z",
            "sha256":  "aa43e5bd4e94fcbdb47833ee74344b59f44bb3eb475e656855bae538c9716fcf",
            "source":  "amazon-inspector",
            "versions":  [
                "1000.0.0"
            ]
        },
        {
            "id":  "IN-MAL-2026-020583",
            "import_time":  "2026-09-28T18:24:37.843334463Z",
            "modified_time":  "2026-09-28T17:58:32Z",
            "sha256":  "ce8ee66a844d7abed74f4b9d223c8ef8f35bae380104526f4f8bc57295c47320",
            "source":  "amazon-inspector",
            "versions":  [
                "999.0.0"
            ]
        },
        {
            "id":  "IN-MAL-2026-020776",
            "import_time":  "2026-09-30T01:36:50.722015489Z",
            "modified_time":  "2026-09-30T01:10:42Z",
            "sha256":  "76ff4203d226c3aec8320c217397a99e823f7d46eb85b79bdd872a97b0dab688",
            "source":  "amazon-inspector",
            "versions":  [
                "1001.0.0"
            ]
        }
    ]
}
References
Credits

Affected packages

PyPI / metrio

Package

Name
metrio
View open source insights on deps.dev
Purl
pkg:pypi/metrio

Affected ranges

Affected versions

999.*
999.0.0
1000.*
1000.0.0
1001.*
1001.0.0

Database specific

cwes 
[
    {
        "cweId":  "CWE-506",
        "description":  "The product contains code that appears to be malicious in nature.",
        "name":  "Embedded Malicious Code"
    },
    {
        "cweId":  "CWE-506",
        "description":  "The product contains code that appears to be malicious in nature.",
        "name":  "Embedded Malicious Code"
    },
    {
        "cweId":  "CWE-506",
        "description":  "The product contains code that appears to be malicious in nature.",
        "name":  "Embedded Malicious Code"
    }
]
indicators 
{
    "evidence_files":  [
        {
            "path":  "metrio/__init__.py",
            "sha256":  "66b1b2912b7fa19bb87f3ba31543ae67f8233c5e108114c912307f352d8ee7b0",
            "tlsh":  "98e02bd3902139d3e5cb9505c4789e3477a3bd4ff0438831758d53482fe9875906151e"
        },
        {
            "path":  "setup.py",
            "sha256":  "566ec6a8684710ef93f190198b1b84fa50bbb9b07e1e6587f66cbcb8e487f6f5",
            "tlsh":  "c0d022099802ae3584a041dcce2240177a74d0224f18f696300ca29c275ea9a8bf5289"
        }
    ],
    "package_integrity":  [
        {
            "filename":  "metrio-1001.0.0.tar.gz",
            "hashes":  {
                "blake2b_256":  "e5a1d24b70435cd5d74f93e7b78128039516e26300bd388837995c5b86c10cee",
                "md5":  "5c42063387840a615d70b90111b758ee",
                "sha256":  "b357ae567113329527f3eb3aab73a643cf4782de1b382f11a0a5ccfd58125b00"
            }
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/metrio/MAL-2026-17193.json"