MAL-2026-4754

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/withdrawn/pypi/heims/MAL-2026-4754.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2026-4754

Withdrawn

2026-05-26T22:13:04Z

Published

2026-05-25T05:27:16Z

Modified

2026-05-27T00:32:10Z

Summary

Malicious code in heims (PyPI)

Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (33e7dda6f116113ebe2bd1ae1ec5238d66f8ada8a87e69a90e49aac1f4eb3f57)

The package's WechatUtil.get_token() in src/heims/utils/wechat/wechat_util.py hardcodes a POST to https://token.zhangjianpeng.cn/ with md5(app_id) and md5(app_secret) as query parameters, and uses the access_token returned by that third-party host for downstream WeChat API calls. The destination is a personal domain controlled by the author, not WeChat's official api.weixin.qq.com endpoint, and this third-party broker is not disclosed in the README. Multiple advertised methods (get_token, get_phone_info, send_text, get_mobile_info, get_qr_code) route through this host, so any caller using WechatUtil delivers hashes of their own WeChat app credentials and the resulting access tokens to the author's server. This is a silent-relay shape: the library's documented WeChat-helper API covertly proxies caller-supplied secrets to a destination the caller did not choose. The behavior fires when the consuming application invokes the WeChat helpers, not at install or import.

Database specific

{
    "malicious-packages-origins":  [
        {
            "id":  "IN-MAL-2026-004584",
            "import_time":  "2026-05-26T05:52:53.21472531Z",
            "modified_time":  "2026-05-25T05:27:16Z",
            "sha256":  "33e7dda6f116113ebe2bd1ae1ec5238d66f8ada8a87e69a90e49aac1f4eb3f57",
            "source":  "amazon-inspector",
            "versions":  [
                "1.1.16"
            ]
        }
    ]
}

References

https://pypi.org/project/heims/1.1.16/

Credits

- Amazon Inspector - FINDER
- - actran@amazon.com

Affected packages

PyPI / heims

Package

Name: heims; View open source insights on deps.dev
Purl: pkg:pypi/heims

Affected ranges

Affected versions

1.*

1.1.16

Database specific

cwes

[
    {
        "cweId":  "CWE-506",
        "description":  "The product contains code that appears to be malicious in nature.",
        "name":  "Embedded Malicious Code"
    }
]

indicators

{
    "evidence_files":  [
        {
            "path":  "src/heims/utils/wechat/wechat_util.py",
            "sha256":  "02aef4ce9ae8ee5e74b1196c077f0e4e890f17950b26671e04afa6729d7d2cc7",
            "tlsh":  "0f42c917ea136d46d35a48ad21ab870676387c13808c6038bdbd51cc1f8d92ba077feb"
        }
    ],
    "package_integrity":  [
        {
            "filename":  "heims-1.1.16-py3-none-any.whl",
            "hashes":  {
                "blake2b_256":  "0feb268d8077d510a4feba8c518f9ca078df312732485fed1fef2f85b489a29d",
                "md5":  "dd5f26fa99eafc47db35aeee546a5fbf",
                "sha256":  "fb5179563d49c8bdee5f2aa87810e1c5c13606c3320931f9db3ccb3dfbd06e9b"
            }
        },
        {
            "filename":  "heims-1.1.16.tar.gz",
            "hashes":  {
                "blake2b_256":  "33882c03b3e8cda29ba6993c62831e45aa10fddc24b5ef453df8532a5cd3f8c2",
                "md5":  "c0bfda4d25643c18295d90648ba3009e",
                "sha256":  "89556c2df773eafa1dd5c3440ac3deee64ef505b8087b0b7c364f7450feb3882"
            }
        }
    ]
}

source

"https://github.com/ossf/malicious-packages/blob/main/osv/withdrawn/pypi/heims/MAL-2026-4754.json"