MAL-2026-18435

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/privacypass-py/MAL-2026-18435.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-18435
Published
2026-11-01T08:01:23Z
Modified
2026-11-01T08:30:04Z
Summary
Malicious code in privacypass-py (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (0ca6e88317dac5ec524d2dc6ec4b2af7934e2213569ed7c8a757e59edb45b0c3)

The package presents itself as 'Privacy Pass client primitives' but ships no cryptographic functionality. Its only runtime effect is a data-exfiltration beacon. setup.py invokes a _report() routine during build/install that collects hostname, username, current working directory, argv, the parent process command line read from /proc//cmdline, and environment variable names and values matching credential-related prefixes (AWS_, GITHUB_, PIP_, and others), then POSTs the JSON payload to the hardcoded bare-IP endpoint http://85.190.112.236:8881/b/ over plain HTTP. privacypass_py/init.py repeats the same beacon at module top level, calling _report('import') on every import privacypass_py with an expanded prefix list (CLOUDFLARE_, SUPERTOKENS, HOME, USER, PATH) and an additional secretish_names list filtered by substrings KEY/SECRET/TOKEN/PASS/CRED/PRIVATE/SEED/MNEMONIC/SIGNATURE/COOKIE/SESSION/AUTH, sent to http://85.190.112.236:8881/f/. The import-time path fires outside pip build isolation. The name and description function as cover for a package whose only shipped code is the beacon.

Database specific 
{
    "malicious-packages-origins":  [
        {
            "id":  "IN-MAL-2026-022471",
            "import_time":  "2026-11-01T08:14:47.241746113Z",
            "modified_time":  "2026-11-01T08:01:23Z",
            "sha256":  "0ca6e88317dac5ec524d2dc6ec4b2af7934e2213569ed7c8a757e59edb45b0c3",
            "source":  "amazon-inspector",
            "versions":  [
                "0.1.101"
            ]
        }
    ]
}
References
Credits

Affected packages

PyPI / privacypass-py

Package

Name
privacypass-py
View open source insights on deps.dev
Purl
pkg:pypi/privacypass-py

Affected ranges

Affected versions

0.*
0.1.101

Database specific

cwes 
[
    {
        "cweId":  "CWE-506",
        "description":  "The product contains code that appears to be malicious in nature.",
        "name":  "Embedded Malicious Code"
    }
]
indicators 
{
    "evidence_files":  [
        {
            "path":  "setup.py",
            "sha256":  "cea0614f670c026bcdd5bc600a13e5463c28d46412c242cd38739bcfee596810",
            "tlsh":  "9f415490ef227c7282d605096828459473bab90f2aa17474f6de23752f9e03982f3e56"
        },
        {
            "path":  "privacypass_py/__init__.py",
            "sha256":  "4862a75e16b2e466f28ba5d71ee6097729502ac5e9294ebbdd0f069004ff5c96",
            "tlsh":  "f7515290ed229d33c29f411e2c1448e0333af40f36556535bacd2678af9d02d52f2d9a"
        }
    ],
    "package_integrity":  [
        {
            "filename":  "privacypass_py-0.1.101.tar.gz",
            "hashes":  {
                "blake2b_256":  "29851396f302ddcb3f730480a1de58a24b39982843a6aed068c33011cd3fd35e",
                "md5":  "e6c7c197293a5ae366da64052d704a35",
                "sha256":  "2427b1b03b2bdb8deab5d0d3d56273e462c59ff0d64f3134ff128745d69ecff3"
            }
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/privacypass-py/MAL-2026-18435.json"