{"answers":{"affected":"1 open source package ship an affected version, including colorstack.","exploited":"There is no known exploitation of MAL-2026-10976 in the wild and no public exploit code.","fix":"Remove the package from your dependencies and lockfiles, then rotate any secrets on machines where it was installed.","what":"MAL-2026-10976 is a malicious package in colorstack, published on 21 Jul 2026."},"fix_prompt":"MAL-2026-10976 is a malicious package: colorstack (PyPI). Every version was published to cause harm.\n\nTask:\n1. Search this repository's dependency manifests and lockfiles for the package, including transitive dependencies.\n2. If it is present, remove it, regenerate the lockfile with the project's package manager, and replace whatever it was used for.\n3. List any CI runners, developer machines or containers that installed it, so their secrets can be rotated.\n4. If the package is not used anywhere, say so and change nothing.\n\nReference: https://insights.sbomify.com/MAL-2026-10976/ (Markdown: https://insights.sbomify.com/MAL-2026-10976/index.md)","id":"MAL-2026-10976","markdown":"https://insights.sbomify.com/MAL-2026-10976/index.md","name":"MAL-2026-10976","record":{"aliases":[],"analysis":null,"analysis_generated_by":null,"assigner":null,"cpe":[],"cvss":{"score":null,"severity":null,"source":null,"vector":null,"version":null},"cwes":[],"description":"The package publishes as 'colorstack' with a summary advertising a color/gradient library, but installs under the import name 'newcolors' and exposes two functions unrelated to color generation. The exported colors() function POSTs to the hardcoded endpoint https://www.fastsyncapi.com/v1/colors, writes the response body to a temporary file preserving the server-supplied filename extension, and dispatches it through the OS via os.startfile on Windows or subprocess.run with open/xdg-open on macOS/Linux. Because the remote server chooses both the filename and the bytes, extensions such as.exe/.bat/.ps1/.lnk on Windows or.command/.desktop/.app handlers on macOS/Linux are executed by the OS shell, giving the operator of fastsyncapi.com arbitrary code execution on any host that calls colors(). A second function, update(activation_key), collects the installer's hostname, locale-derived country code, and a SHA-256 device hash derived from the hostname and the MAC address returned by uuid.getnode(), and POSTs those fields together with the activation key to https://www.fastsyncapi.com/v1/update; the response token is persisted to ~/.config/newcolors/vtoken.json. The hostname+MAC-derived HWID is a stable per-host fingerprint that lets the operator uniquely identify installers and select per-host payloads through the colors() channel. The fastsyncapi.com domain has no relation to a color library, and the package name/summary/README serve as a cover story for this fetch-and-execute and fingerprinting behavior.\n\nThe package hides code to download and execute a remote executable from a newly created fastsyncapi[.]com domain. It is disguised as a remote 'fast color helper,' as opposed to the local helper, also included in the code, that only mimics any functionality. The malicious part is not immediately active: to download the binary, a key is required, which was not included in the analyzed versions. The downloaded binary is executed, and at least in one case disguised as 'AppHostRegistrationVerifier'. The package is likely prepared for multi-stage infection, but the trigger code using it was not identified.\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\nCampaign: 2026-07-colorstack\n\nReasons (based on the campaign):\n\n - Downloads and executes a remote executable.\n\n - action-hidden-in-lib-usage","ecosystems":["PyPI"],"exploits":{"exploitdb":null,"first_seen":null,"github_poc":null,"max_poc_stars":null,"metasploit":null,"nuclei":null,"refs":[],"tier":null},"has_fix":false,"headline":"Malicious code in colorstack (PyPI)","id":"MAL-2026-10976","indexable":true,"kev":null,"kind":"malicious","links":{"ecosystem":"PyPI","product":null,"products":[],"type":null,"year":"2026"},"n_packages":1,"n_references":null,"packages":[{"ecosystem":"PyPI","fixed":[],"introduced":[],"last_affected":[],"package":"colorstack","purl":"pkg:pypi/colorstack","source":"MAL-2026-10976"}],"products":null,"published":"2026-07-21","related":[],"sources":[{"class":"attribution","licence":"Apache-2.0","name":"OpenSSF Malicious Packages","prefix":"MAL"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":null,"updated":null,"vendors":null},"summary":null,"url":"https://insights.sbomify.com/MAL-2026-10976/"}