{"answers":{"affected":"1 open source package ship an affected version, including ctf-toolkit.","exploited":"There is no known exploitation of MAL-2026-1085 in the wild and no public exploit code.","fix":"Remove the package from your dependencies and lockfiles, then rotate any secrets on machines where it was installed.","what":"MAL-2026-1085 is a malicious package in ctf-toolkit, published on 28 Feb 2026."},"fix_prompt":"MAL-2026-1085 is a malicious package: ctf-toolkit (PyPI). Every version was published to cause harm.\n\nTask:\n1. Search this repository's dependency manifests and lockfiles for the package, including transitive dependencies.\n2. If it is present, remove it, regenerate the lockfile with the project's package manager, and replace whatever it was used for.\n3. List any CI runners, developer machines or containers that installed it, so their secrets can be rotated.\n4. If the package is not used anywhere, say so and change nothing.\n\nReference: https://insights.sbomify.com/MAL-2026-1085/ (Markdown: https://insights.sbomify.com/MAL-2026-1085/index.md)","id":"MAL-2026-1085","markdown":"https://insights.sbomify.com/MAL-2026-1085/index.md","name":"MAL-2026-1085","record":{"aliases":[],"analysis":null,"analysis_generated_by":null,"assigner":null,"cpe":[],"cvss":{"score":null,"severity":null,"source":null,"vector":null,"version":null},"cwes":[],"description":"The package states to contain a modified curl library to allow low-level request modifications. However, there is also undisclosed malicious behavior:\n\n1. The package installs a .pth file directly in the site-packages directory, effectively running a special code on each Python usage.\n2. This code performs \"TLS context warm-up\" by contacting a URL (Github) in the background, in a separate process; this is suspicious on its own as it's unclear how a separate process can warm up further requests in the main process, but...\n3. ...besides the URL given in the code above, the library always contacts a hardcoded URL, identifying itself as a VPN client.\n\nAdditionally, there is no source code of the modified library anywhere, and the related Github hosting the package code account is 1-day old.\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\nCampaign: 2026-02-ctf-toolkit\n\nReasons (based on the campaign):\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.","ecosystems":["PyPI"],"exploits":{"exploitdb":null,"first_seen":null,"github_poc":null,"max_poc_stars":null,"metasploit":null,"nuclei":null,"refs":[],"tier":null},"has_fix":false,"headline":"Malicious code in ctf-toolkit (PyPI)","id":"MAL-2026-1085","indexable":true,"kev":null,"kind":"malicious","links":{"ecosystem":"PyPI","product":null,"products":[],"type":null,"year":"2026"},"n_packages":1,"n_references":null,"packages":[{"ecosystem":"PyPI","fixed":[],"introduced":[],"last_affected":[],"package":"ctf-toolkit","purl":"pkg:pypi/ctf-toolkit","source":"MAL-2026-1085"}],"products":null,"published":"2026-02-28","related":[],"sources":[{"class":"attribution","licence":"Apache-2.0","name":"OpenSSF Malicious Packages","prefix":"MAL"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":null,"updated":null,"vendors":null},"summary":null,"url":"https://insights.sbomify.com/MAL-2026-1085/"}