{"answers":{"affected":"1 open source package ship an affected version, including research-probe-6150c1c915.","exploited":"There is no known exploitation of MAL-2026-18097 in the wild and no public exploit code.","fix":"Remove the package from your dependencies and lockfiles, then rotate any secrets on machines where it was installed.","what":"MAL-2026-18097 is a malicious package in research-probe-6150c1c915, published on 20 Oct 2026."},"fix_prompt":"MAL-2026-18097 is a malicious package: research-probe-6150c1c915 (PyPI). Every version was published to cause harm.\n\nTask:\n1. Search this repository's dependency manifests and lockfiles for the package, including transitive dependencies.\n2. If it is present, remove it, regenerate the lockfile with the project's package manager, and replace whatever it was used for.\n3. List any CI runners, developer machines or containers that installed it, so their secrets can be rotated.\n4. If the package is not used anywhere, say so and change nothing.\n\nReference: https://insights.sbomify.com/MAL-2026-18097/ (Markdown: https://insights.sbomify.com/MAL-2026-18097/index.md)","id":"MAL-2026-18097","markdown":"https://insights.sbomify.com/MAL-2026-18097/index.md","name":"MAL-2026-18097","record":{"aliases":[],"analysis":null,"analysis_generated_by":null,"assigner":null,"cpe":[],"cvss":{"score":null,"severity":null,"source":null,"vector":null,"version":null},"cwes":[],"description":"The package ships a `.pth` file that imports `research_probe_6150c1c915._boot` on every Python interpreter startup, with no explicit import by the user required. `_boot.py` executes `bootstrap()` which snapshots the full `os.environ`, enumerates `/proc/*/cmdline` for up to 200 processes, and queries the GCP instance metadata service at `http://169.254.169.254/computeMetadata/v1/?recursive=true` and `.../service-accounts/default/email` with the `Metadata-Flavor: Google` header. The `recursive=true` metadata query on a GCE/GKE/Cloud Run host returns service-account OAuth access tokens and other credential material. Collected data (environment variables and metadata responses, including any returned tokens) is written as JSON to `/tmp/research_probe_6150c1c915/` and to a `_runs/` directory inside the installed package. The `/tmp` destination is world-readable on default Linux configurations, so any local account on the same host can read the harvested cloud credentials and environment. The `.pth` auto-execution mechanism makes this fire on every Python invocation after install, not just when the module is imported.\n\nThe package is most likely a reconnaissance of a shared infrastructure, collecting potentially sensitive data from cloud endpoints, activated via a PTH file on every Python loading. Collected data are stored in a local filesystem, suggesting the operator has to have some degree of control of the environment.\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\nCampaign: 2026-10-omeraf\n\nReasons (based on the campaign):\n\n - exfiltration-cloud-tokens\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n - other\n\n - abuses-pth","ecosystems":["PyPI"],"exploits":{"exploitdb":null,"first_seen":null,"github_poc":null,"max_poc_stars":null,"metasploit":null,"nuclei":null,"refs":[],"tier":null},"has_fix":false,"headline":"Malicious code in research-probe-6150c1c915 (PyPI)","id":"MAL-2026-18097","indexable":true,"kev":null,"kind":"malicious","links":{"ecosystem":"PyPI","product":null,"products":[],"type":null,"year":"2026"},"n_packages":1,"n_references":null,"packages":[{"ecosystem":"PyPI","fixed":[],"introduced":[],"last_affected":[],"package":"research-probe-6150c1c915","purl":"pkg:pypi/research-probe-6150c1c915","source":"MAL-2026-18097"}],"products":null,"published":"2026-10-20","related":[],"sources":[{"class":"attribution","licence":"Apache-2.0","name":"OpenSSF Malicious Packages","prefix":"MAL"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":null,"updated":null,"vendors":null},"summary":null,"url":"https://insights.sbomify.com/MAL-2026-18097/"}