MAL-2026-17200

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/aseity/MAL-2026-17200.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-17200
Published
2026-09-27T14:15:46Z
Modified
2026-09-28T22:30:05Z
Summary
Malicious code in aseity (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (d65d0df302f9fdd618d08a8bc095702f5b6594712ba82205c758c710fee9006e)

setup.py invokes aseity.compat._ensure_compat, which base64+zlib-decodes the DATA constant shipped in aseity/_shimdata.py and passes the resulting Python source to exec(), so the payload runs automatically on pip install. aseity/init.py runs the same routine, so a bare import aseity also triggers it. The decoded stage-1 performs VM and debugger checks, downloads https://thisisafalsepositive.st/cdn/v2/9f4e7a2c1b8d.png (a PNG carrying a ZIP inside its chunks), extracts a bundled python.exe and AppHost/main.py to a temp directory, and launches subprocess.Popen([py, entry, '-u', _USER, '--env', 'EXE', '--tag', 'PyPi']) with Windows creationflags DETACHED_PROCESS | CREATE_NO_WINDOW (0x00000008 | 0x08000000). A hardcoded per-victim UUID (_USER='e00db386-ab62-4dc1-91fd-21ef9ff3e6ef') is passed to the second stage. The domain thisisafalsepositive.st is not associated with any declared publisher, the delivered bytes are opaque, the payload is hidden as an encoded blob in a data-named module, and the launcher deliberately detaches with no visible window — the shape of a supply-chain dropper deploying a persistent second-stage implant on the installer's host.

Source: kam193 (cf65ea5c0fe1eeef9f47a75d65e291a715094076714694247ad03714eabc53ca)

During installation, obfuscated code is used to fetch code hidden in an image containing a Python application with a native extension module. This module holds an obfuscated infostealer which collects sensitive data and exfiltrates them to a C2 server retrieved from transaction history in the Polygon blockchain.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-09-donutautosellsrc

Reasons (based on the campaign):

  • infostealer

  • Downloads and executes a remote executable.

  • obfuscation

  • malware

  • native-extension

  • steganography

  • c2-in-blockchain

  • The package contains code to detect if it is running in a sandbox environment.

Database specific 
{
    "iocs":  {
        "domains":  [
            "thisisafalsepositive.st",
            "sltnnt.ru"
        ],
        "urls":  [
            "https://thisisafalsepositive.st/cdn/v2/9f4e7a2c1b8d.png",
            "https://thisisafalsepositive.st/cdn/v2/promotion/manifest.json"
        ]
    },
    "malicious-packages-origins":  [
        {
            "id":  "pypi/2026-09-donutautosellsrc/aseity",
            "import_time":  "2026-09-27T15:16:24.602624157Z",
            "modified_time":  "2026-09-27T14:15:46.125923Z",
            "sha256":  "cf65ea5c0fe1eeef9f47a75d65e291a715094076714694247ad03714eabc53ca",
            "source":  "kam193",
            "versions":  [
                "0.1.0"
            ]
        },
        {
            "id":  "IN-MAL-2026-020578",
            "import_time":  "2026-09-28T14:21:43.6255932Z",
            "modified_time":  "2026-09-28T14:17:43Z",
            "sha256":  "d65d0df302f9fdd618d08a8bc095702f5b6594712ba82205c758c710fee9006e",
            "source":  "amazon-inspector",
            "versions":  [
                "0.1.0"
            ]
        },
        {
            "id":  "pypi/2026-09-donutautosellsrc/aseity",
            "import_time":  "2026-09-28T22:18:26.130227673Z",
            "modified_time":  "2026-09-27T14:15:46.125923Z",
            "sha256":  "16b7922f1908a09623723d954ad42997eef7a97144e450cb23f0898b2d459f0d",
            "source":  "kam193",
            "versions":  [
                "0.1.0"
            ]
        }
    ]
}
References
Credits

Affected packages

PyPI / aseity

Package

Name
aseity
View open source insights on deps.dev
Purl
pkg:pypi/aseity

Affected ranges

Affected versions

0.*
0.1.0

Database specific

cwes 
[
    {
        "cweId":  "CWE-506",
        "description":  "The product contains code that appears to be malicious in nature.",
        "name":  "Embedded Malicious Code"
    }
]
indicators 
{
    "evidence_files":  [
        {
            "path":  "aseity/compat.py",
            "sha256":  "bcbf1ed8bcb83753f6913abbc6b41b9d8c394464ed0d93a33b98052d42af05e3",
            "tlsh":  "6401947194542cf1f224b41a8961e4acc1ad6e0b7d256014bc4c47ec1fa5b12c1e25ec"
        },
        {
            "path":  "aseity/_shimdata.py",
            "sha256":  "d404bdb4515aa25231f59e7ddfd6592b29b98dc78231fc1efb6fee585ee9eb27",
            "tlsh":  "9c312b12fc610521626a782e0ca468a85df137e3da19bb55d0dbdaa75c431c5e8c9370"
        }
    ],
    "package_integrity":  [
        {
            "filename":  "aseity-0.1.0.tar.gz",
            "hashes":  {
                "blake2b_256":  "40ab26f62939196cd3d687c84892295fee2e06f519ed099599872d6ab0bf47c4",
                "md5":  "3740ee6048df40a0154ef546df874663",
                "sha256":  "9c223b8caa928ca44161921ab62d6e8d68208d6cbea4a50ddb2ae61d2ab3200e"
            }
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/aseity/MAL-2026-17200.json"