{"answers":{"affected":"1 open source package ship an affected version, including zagents-message-bus.","exploited":"There is no known exploitation of MAL-2026-18296 in the wild and no public exploit code.","fix":"Remove the package from your dependencies and lockfiles, then rotate any secrets on machines where it was installed.","what":"MAL-2026-18296 is a malicious package in zagents-message-bus, published on 25 Oct 2026."},"fix_prompt":"MAL-2026-18296 is a malicious package: zagents-message-bus (PyPI). Every version was published to cause harm.\n\nTask:\n1. Search this repository's dependency manifests and lockfiles for the package, including transitive dependencies.\n2. If it is present, remove it, regenerate the lockfile with the project's package manager, and replace whatever it was used for.\n3. List any CI runners, developer machines or containers that installed it, so their secrets can be rotated.\n4. If the package is not used anywhere, say so and change nothing.\n\nReference: https://insights.sbomify.com/MAL-2026-18296/ (Markdown: https://insights.sbomify.com/MAL-2026-18296/index.md)","id":"MAL-2026-18296","markdown":"https://insights.sbomify.com/MAL-2026-18296/index.md","name":"MAL-2026-18296","record":{"aliases":[],"analysis":null,"analysis_generated_by":null,"assigner":null,"cpe":[],"cvss":{"score":null,"severity":null,"source":null,"vector":null,"version":null},"cwes":[],"description":"pypi package zagents-message-bus is published at an implausibly inflated version (99.99.100) under an internal-sounding name, consistent with a dependency-confusion resolution-override attempt against a private package of the same name. The shipped main.py defines CALLBACK_URL = \"https://webhook.site/b961eb5e-fabc-43a5-83a3-d1509c3a558e\" and performs an HTTP GET to that URL with a diagnostic-error query parameter when main() is invoked. The webhook.site endpoint is an anonymous third-party request-logging service typical of dependency-confusion canaries and reconnaissance beacons. The package has no install-time hook (no setup.py side effects, no build-backend network I/O) and the beacon does not fire on bare import — the __init__ re-exports symbols that do not exist in main.py, so `import zagents_message_bus` raises ImportError before the GET runs. The beacon therefore only fires if a consumer explicitly calls main(). No credential reads, filesystem writes outside the package, or code execution of fetched content are present.\n\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research \u0026 co, with clearly low-harm possibilities.\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\nReasons (based on the campaign):\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n - The package overrides the install command in setup.py to execute malicious code during installation.","ecosystems":["PyPI"],"exploits":{"exploitdb":null,"first_seen":null,"github_poc":null,"max_poc_stars":null,"metasploit":null,"nuclei":null,"refs":[],"tier":null},"has_fix":false,"headline":"Malicious code in zagents-message-bus (PyPI)","id":"MAL-2026-18296","indexable":true,"kev":null,"kind":"malicious","links":{"ecosystem":"PyPI","product":null,"products":[],"type":null,"year":"2026"},"n_packages":1,"n_references":null,"packages":[{"ecosystem":"PyPI","fixed":[],"introduced":[],"last_affected":[],"package":"zagents-message-bus","purl":"pkg:pypi/zagents-message-bus","source":"MAL-2026-18296"}],"products":null,"published":"2026-10-25","related":[],"sources":[{"class":"attribution","licence":"Apache-2.0","name":"OpenSSF Malicious Packages","prefix":"MAL"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":null,"updated":null,"vendors":null},"summary":null,"url":"https://insights.sbomify.com/MAL-2026-18296/"}