MAL-2026-4771

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/withdrawn/pypi/strawberry-graphql/MAL-2026-4771.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-4771
Withdrawn
2026-05-26T16:40:12Z
Published
2026-05-20T17:47:53Z
Modified
2026-05-27T00:32:14Z
Summary
Malicious code in strawberry-graphql (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (8eb433a0339783d1a58993e1611278218492a4349a80801e6c6a2d475278a99c)

This package is published under the strawberry-graphql name but diverges from the legitimate upstream by declaring a hard runtime dependency on cross-web>=0.6.0 in pyproject.toml. The legitimate strawberry-graphql project depends on python-multipart, not cross-web. The HTTP layer (e.g., strawberry/http/base.py line 6: from cross_web import HTTPException) imports symbols from cross_web on module load, so any installer of this package transitively pulls and executes cross-web at import time. Routing every installer through an unvouched third-party package while masquerading as a well-known GraphQL library is the delivery mechanism for a supply-chain attack — the harm is concentrated in whatever cross-web ships, but this package is the lure that forces its installation.

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "IN-MAL-2026-003580",
            "import_time": "2026-05-26T05:50:53.972130484Z",
            "modified_time": "2026-05-20T17:47:53Z",
            "sha256": "8eb433a0339783d1a58993e1611278218492a4349a80801e6c6a2d475278a99c",
            "source": "amazon-inspector",
            "versions": [
                "0.315.6"
            ]
        }
    ]
}
References
Credits

Affected packages

PyPI / strawberry-graphql

Package

Name
strawberry-graphql
View open source insights on deps.dev
Purl
pkg:pypi/strawberry-graphql

Affected ranges

Affected versions

0.*
0.315.6

Database specific

cwes 
[
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    }
]
indicators 
{
    "evidence_files": [
        {
            "path": "pyproject.toml",
            "sha256": "82c449c63c51d80dda2646436b9eb580d4350c2b10517f13a4ebbf65407440ea",
            "tlsh": "8412b7a3b39d3a9466c240c160ea9245e366dd57a7a5b40d33db82880a1ccd7f37d73e"
        }
    ],
    "package_integrity": [
        {
            "filename": "strawberry_graphql-0.315.6-py3-none-any.whl",
            "hashes": {
                "blake2b_256": "bfce3c504374c4d1bb51e73fb36bcbb2957822f78d8d97e71787b6c4badd9602",
                "md5": "f8e820ab5cd0b5a739415c9545791db7",
                "sha256": "4a469df50a043e61620e19d130dffd92d2855e6a874de47ce93adad9ed6b2d09"
            }
        },
        {
            "filename": "strawberry_graphql-0.315.6.tar.gz",
            "hashes": {
                "blake2b_256": "d5ec671570f74b7cb1674b2ee7cdb805c80e26a5026c1a3ec70808a981a14441",
                "md5": "4962406f5454c0f62e46a2c69a3f0d94",
                "sha256": "ed05cb77c13783a6558be081158228170541cebed1a90e80541a23c138dc6fcd"
            }
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/withdrawn/pypi/strawberry-graphql/MAL-2026-4771.json"