MAL-2026-17847

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/npp-ml/MAL-2026-17847.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-17847
Published
2026-10-12T20:17:47Z
Modified
2026-10-29T13:48:11Z
Summary
Malicious code in npp-ml (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (3ac13184b04573151fc11ac8de28c384f016b49ed76d8689f46cf5c24909feca)

The package's setup.py declares scripts=['bin/python'], which causes pip to copy the file literally named python into the installer's script directory (e.g. a virtualenv bin/, /usr/local/bin/, or Scripts\ on Windows). The shipped bin/python file is not a Python script — it begins with ZIP magic PK\x03\x04 and contains a bundled Windows Python 3.10 distribution (python310.dll, pythonw.exe, _ssl.pyd, libssl-1_1.dll, python310.zip). After install, invoking python from the affected directory resolves to this non-executable archive rather than a real interpreter, breaking the python command for anything that resolves it from that directory first. The archive contents are a stock Windows Python runtime and do not contain outbound network code, credential access, or persistence mechanisms; the harm is local breakage of the installer's interpreter command, not exfiltration or remote code execution.

Source: kam193 (7f575d02caf2363703b49c45c7f5ba106b798ee4f5b02f1977b118f2b52ff30e)

The package claims to provide a Notepad++ distribution, but in fact delivers ADExplorer, an Active Directory analysis tool.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-10-npp-ml

Reasons (based on the campaign):

  • other

  • impersonation

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "pypi/2026-10-npp-ml/npp-ml",
            "import_time": "2026-10-12T20:46:18.126118521Z",
            "modified_time": "2026-10-12T20:17:47.14413Z",
            "sha256": "7f575d02caf2363703b49c45c7f5ba106b798ee4f5b02f1977b118f2b52ff30e",
            "source": "kam193",
            "versions": [
                "0.1.7",
                "0.1.8",
                "0.1.9"
            ]
        },
        {
            "id": "pypi/2026-10-npp-ml/npp-ml",
            "import_time": "2026-10-13T14:49:00.641384602Z",
            "modified_time": "2026-10-13T14:38:04.044181Z",
            "sha256": "14fea11838b844155e70cb38accede0c1bf97ebcf3e85a29ea6588f252e10ce0",
            "source": "kam193",
            "versions": [
                "0.1.7",
                "0.1.8",
                "0.1.9",
                "0.1.10"
            ]
        },
        {
            "id": "IN-MAL-2026-021981",
            "import_time": "2026-10-29T13:37:18.638651577Z",
            "modified_time": "2026-10-29T13:33:26Z",
            "sha256": "3ac13184b04573151fc11ac8de28c384f016b49ed76d8689f46cf5c24909feca",
            "source": "amazon-inspector",
            "versions": [
                "0.1.10"
            ]
        }
    ]
}
References
Credits

Affected packages

PyPI / npp-ml

Package

Name
npp-ml
View open source insights on deps.dev
Purl
pkg:pypi/npp-ml

Affected ranges

Affected versions

0.*
0.1.7
0.1.8
0.1.9
0.1.10

Database specific

cwes 
[
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    }
]
indicators 
{
    "evidence_files": [
        {
            "path": "setup.py",
            "sha256": "d8cc6b36df21ab2e840045f8d181c8da88bceb6fe9565aadca881fbbe7dc89ed",
            "tlsh": "4fd0a72d0e6bd83616d6de94072790143b7172211650b44418fd40086accc95ce79c20"
        }
    ],
    "package_integrity": [
        {
            "filename": "npp_ml-0.1.10.tar.gz",
            "hashes": {
                "blake2b_256": "0bdeb5cbc4cafcfe7e676fb3b05da23efa0c18ab5ae3766c6dee54f40fff957e",
                "md5": "d273c3a508bf03bb30b5a9e7472e0fbb",
                "sha256": "b6644556136e8f2aa4533d3cf8cd8c64b2c2b9924553a150ab95cd3c5048a8b1"
            }
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/npp-ml/MAL-2026-17847.json"