MAL-2026-5770

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/llmgenerator/MAL-2026-5770.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-5770
Published
2026-06-14T11:41:32Z
Modified
2026-06-15T23:00:59.812835909Z
Summary
Malicious code in llmgenerator (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (06e55ac2d3368516d538c8efaad2b83814dbb61813f36ab5655f77677ca0d6be)

On pip install, setup.py performs an HTTP GET to https://pastebin.com/raw/yBcUM1QB, takes the first line of the response body, and passes it to os.system(f'cmd /c "{cmd_pastebin}"'). The fetched content is mutable, anonymous, and unauthenticated — the author can change what runs on every installer's machine at any time without republishing the package. The package ships no functional Python code (src/ contains only an empty.egg-info directory), confirming the package exists solely as a vehicle for the install-time dropper. The package name impersonates an LLM-tooling brand to attract installs. Installing this package grants arbitrary shell execution on the installer's Windows machine.

Source: kam193 (1948e85cdc950b3661b64655a2c0cc73708ecf6e409d19a77089e4089864411a)

During installation, the code attempts to download and start a malicious executable.

Likely related to 2025-08-raknet-testing-package.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-06-easyaillm

Reasons (based on the campaign):

  • Downloads and executes a remote executable.

  • obfuscation

  • malware

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "pypi/2026-06-easyaillm/llmgenerator",
            "import_time": "2026-06-14T12:46:06.091798672Z",
            "versions": [
                "2.21"
            ],
            "source": "kam193",
            "sha256": "1948e85cdc950b3661b64655a2c0cc73708ecf6e409d19a77089e4089864411a",
            "modified_time": "2026-06-14T11:41:32.817123Z"
        },
        {
            "id": "IN-MAL-2026-006694",
            "import_time": "2026-06-15T20:14:28.584995865Z",
            "versions": [
                "2.21"
            ],
            "source": "amazon-inspector",
            "modified_time": "2026-06-15T19:56:02Z",
            "sha256": "06e55ac2d3368516d538c8efaad2b83814dbb61813f36ab5655f77677ca0d6be"
        },
        {
            "id": "pypi/2026-06-easyaillm/llmgenerator",
            "import_time": "2026-06-15T22:45:32.263741203Z",
            "versions": [
                "2.21"
            ],
            "source": "kam193",
            "modified_time": "2026-06-14T11:41:32.817123Z",
            "sha256": "73050507e6d65ae0abcb9a0920fb9c13a31a0b8f776410020a35f11c0f332902"
        }
    ],
    "iocs": {
        "urls": [
            "https://pastebin.com/raw/hEF5HaFc",
            "https://pastebin.com/raw/yBcUM1QBs",
            "https://pastebin.com/raw/yBcUM1QB",
            "http://fixars.top"
        ],
        "domains": [
            "fixars.top"
        ]
    }
}
References
Credits

Affected packages

PyPI / llmgenerator

Package

Name
llmgenerator
View open source insights on deps.dev
Purl
pkg:pypi/llmgenerator

Affected ranges

Affected versions

2.*
2.21

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/llmgenerator/MAL-2026-5770.json"
cwes 
[
    {
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature.",
        "cweId": "CWE-506"
    }
]
indicators 
{
    "package_integrity": [
        {
            "filename": "llmgenerator-2.21.tar.gz",
            "hashes": {
                "blake2b_256": "488aee7b57ef2f81a0c7a90c4329173c0b88b72b9a39e1c02fd040ba69021887",
                "md5": "08a631e3a12f8a0c06e9a0a7513e4536",
                "sha256": "3a391a4ba29f252da356577123f4665e8a5f2ef5f1e9ca7319d25cb34a7addb0"
            }
        }
    ],
    "evidence_files": [
        {
            "path": "setup.py",
            "sha256": "e6812e67bb45af40ebe2545a37f161f422bb23319d2ead155be69a32a50fbc9d",
            "tlsh": "13116713cdc77ca562b2814059267820f9219b675752d447743c436d7f746e0caf28bc"
        }
    ]
}