MAL-2026-17639

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/lore-cs/MAL-2026-17639.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-17639
Published
2026-10-06T21:13:57Z
Modified
2026-10-08T04:00:04Z
Summary
Malicious code in lore-cs (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (f84e496d81c3e514ec784db2d5996a9015fa9f01f50cb75a99011eb348b2aa07)

lore-cs 1.0.0 executes an outbound HTTP POST both from setup.py (at install time) and from lore_cs/init.py (at import time) to the hardcoded bare-IP endpoint http://185.158.107.175:8787/_ah/dc over plaintext HTTP. The payload includes the installer's hostname, install path, current working directory, and package name. The import-time beacon fires on every import, so the behavior also triggers in environments where pip build isolation would otherwise contain setup.py side effects. The destination is a hardcoded author-controlled bare IP not configured by the installer, and the package self-labels as a dependency-confusion canary while performing unauthenticated host-identifier collection against anyone who installs or imports it.

Source: kam193 (ae8b741b7c90400c3a5f4ba13533b1a6a75134f768934834b591c8df23eecb83)

During installation or import, the package exfiltrates basic information in a dependency confusion attempt. The user identifies themselves as a HackerOne user abusing the PyPI for the purpose of a bug bounty program.

Category: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.

Campaign: GENERIC-hackerone-bugbounty

Reasons (based on the campaign):

  • The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.

  • dependency-confusion

Database specific 
{
    "malicious-packages-origins":  [
        {
            "id":  "pypi/GENERIC-hackerone-bugbounty/lore-cs",
            "import_time":  "2026-10-06T21:41:45.414022856Z",
            "modified_time":  "2026-10-06T21:13:57.624724Z",
            "sha256":  "ae8b741b7c90400c3a5f4ba13533b1a6a75134f768934834b591c8df23eecb83",
            "source":  "kam193",
            "versions":  [
                "1.0.0"
            ]
        },
        {
            "id":  "IN-MAL-2026-021129",
            "import_time":  "2026-10-08T03:50:29.849075864Z",
            "modified_time":  "2026-10-08T03:40:16Z",
            "sha256":  "f84e496d81c3e514ec784db2d5996a9015fa9f01f50cb75a99011eb348b2aa07",
            "source":  "amazon-inspector",
            "versions":  [
                "1.0.0"
            ]
        }
    ]
}
References
Credits

Affected packages

PyPI / lore-cs

Package

Name
lore-cs
View open source insights on deps.dev
Purl
pkg:pypi/lore-cs

Affected ranges

Affected versions

1.*
1.0.0

Database specific

cwes 
[
    {
        "cweId":  "CWE-506",
        "description":  "The product contains code that appears to be malicious in nature.",
        "name":  "Embedded Malicious Code"
    }
]
indicators 
{
    "evidence_files":  [
        {
            "path":  "setup.py",
            "sha256":  "65d3409ebd3e5b92933897f7b847a38a1e05439863ed4d4679c9d29aaa0d05a7",
            "tlsh":  "fc4187d1cc212da441d7f2e48d256899332dba93bf02685839dc428d1f0f5fd91b2a65"
        },
        {
            "path":  "lore_cs/__init__.py",
            "sha256":  "5ed355735922de2fee3046a66958d715b3d8eece77bf79bfb397727c06e04716",
            "tlsh":  "292166c0c92009912183a3d0953f6976a33471e3bf635c513e8c96dc0f0e86b84f3da4"
        }
    ],
    "package_integrity":  [
        {
            "filename":  "lore_cs-1.0.0-py3-none-any.whl",
            "hashes":  {
                "blake2b_256":  "f23326bcb5c55c1298a456d0cb043007bede4833a70bc2fa2e6ba022e07d967d",
                "md5":  "e4f4f9356413f3aec9870ad6b6259ca4",
                "sha256":  "d071c62082afc6237992adf9265c3dfcb858c119a77011baeea879b0c34e48bd"
            }
        },
        {
            "filename":  "lore_cs-1.0.0.tar.gz",
            "hashes":  {
                "blake2b_256":  "93821c698a9c361cc8859f13d7dd62cd89b586b6e862e94845aff870541b51b0",
                "md5":  "64f98005e339f384fe57b056b511f363",
                "sha256":  "37c7268ec40ad049c854f0190ca71ca97c4216d5d9c352f556b7f5bd49fde2ce"
            }
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/lore-cs/MAL-2026-17639.json"