MAL-2026-6728

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/dt-validator/MAL-2026-6728.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-6728
Published
2026-07-02T17:39:30Z
Modified
2026-07-08T23:47:00.395421031Z
Summary
Malicious code in dt-validator (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (b0dd6dc392ad68861c938e7798773adf5359c835743e711a834d84221b481bdf)

The package's top-level public API dt_validator.validate() — colocated in __all__ with legitimate helpers validate_extension, validate_size, and validate_checksum — unconditionally issues an HTTP request to a hardcoded https://file-api.free.beeceptor.com endpoint (a shared public HTTP-mock service on the free-tier subdomain, not publisher-controlled infrastructure), then compile()s the response body and exec()s it in the CALLER's module globals, obtained via inspect.currentframe().f_back.f_globals (see api_client.py DEFAULT_API_ENDPOINT and validate_data(..., allow_exec=True, namespace=caller_globals)). Endpoint names on beeceptor's free shared subdomain are not authenticated to the maintainer — anyone who claims or has claimed that endpoint name can serve arbitrary Python that runs with the caller's identity and full access to the caller's module namespace. The README further documents a different default host (file-read.free.beeceptor.com) than the code actually contacts (file-api.free.beeceptor.com), so a developer auditing README does not see the destination the code reaches. Execution is not install-time or import-time — a caller must invoke validate() — but the API name and colocation are engineered to be hit by a developer who thinks they are calling an input validator. No installer-secret reads, no lifecycle hooks, and no other exfil/backdoor mechanisms are present. Routing to human review: the remote-exec-into-caller-globals surface via an unowned shared mock host is a real risk to consumers who call validate(), but harm requires the developer to invoke the API rather than firing on pip install/import.

Source: kam193 (0fc0256380d811cdce05ffa9c3644a5f7e4ebd6f7acfce0f955935b42449b17a)

Code contains a function to execute remote code, which at the time of analysis was extracting the "auth_user" table from Django DB. The remote code execution is partially documented and disguised with multiple warnings, but a) the 'convenience function' uses a hardcoded endpoint and loads results to the global namespace, b) the warnings are silenced by default.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-06-dt-validator

Reasons (based on the campaign):

  • Downloads and executes a remote malicious script.

  • action-hidden-in-lib-usage

Database specific 
{
    "malicious-packages-origins": [
        {
            "import_time": "2026-07-02T18:07:05.626863842Z",
            "source": "kam193",
            "modified_time": "2026-07-02T17:39:30.601056Z",
            "sha256": "0fc0256380d811cdce05ffa9c3644a5f7e4ebd6f7acfce0f955935b42449b17a",
            "id": "pypi/2026-06-dt-validator/dt-validator",
            "versions": [
                "0.3.0"
            ]
        },
        {
            "import_time": "2026-07-08T23:27:56.165626611Z",
            "source": "amazon-inspector",
            "modified_time": "2026-07-08T22:59:22Z",
            "sha256": "b0dd6dc392ad68861c938e7798773adf5359c835743e711a834d84221b481bdf",
            "id": "IN-MAL-2026-008966",
            "versions": [
                "0.3.0"
            ]
        }
    ],
    "iocs": {
        "urls": [
            "https://file-api.free.beeceptor.com"
        ],
        "domains": [
            "file-api.free.beeceptor.com"
        ]
    }
}
References
Credits

Affected packages

PyPI / dt-validator

Package

Name
dt-validator
View open source insights on deps.dev
Purl
pkg:pypi/dt-validator

Affected ranges

Affected versions

0.*
0.3.0

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/dt-validator/MAL-2026-6728.json"
indicators 
{
    "evidence_files": [
        {
            "sha256": "24dcaa5b2678dbe34a7830695a215cfa3314959ce4b5fe1872dcb46b42dfcf21",
            "tlsh": "8042b84b5d4356538596c5a48d6ed985d31ab00bbe402db1fd8cc2dc3f88266e8fe2cd",
            "path": "src/dt_validator/api_client.py"
        }
    ],
    "package_integrity": [
        {
            "filename": "dt_validator-0.3.0-py3-none-any.whl",
            "hashes": {
                "blake2b_256": "93afd025491b1452257feaf3e45da753b7b1608361d7ba01b8d7604be959d0a4",
                "sha256": "a6b9fa23d300bd6133dd4c7ecfa05893ed68dc108cdd6726c0c256441eba5f06",
                "md5": "7141d8c7c490c89e841e1db7e33256bd"
            }
        },
        {
            "filename": "dt_validator-0.3.0.tar.gz",
            "hashes": {
                "blake2b_256": "f543d16dacb2a6c758310456c3a9c61e886a48384842895e392bec2f00084c32",
                "sha256": "6aba0ac08b81f56de7a7d80e7ace561c8f897fc573a61308d70491e627d65fbc",
                "md5": "331149c7af77583799066657bb93d74c"
            }
        }
    ]
}
cwes 
[
    {
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature."
    }
]