MAL-2026-18396 Malicious code in bq-helix-recon-6ade983e (PyPI)

Package places PTH/sitecustomize files triggering execution of malicious code on every Python startup. The code then collects information from the environment, including credential files, environment variables, data from cloud metadata endpoints, and finally exfiltrates them.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-10-bq-helix-recon

Reasons (based on the campaign):

• abuses-pth

• exfiltration-cloud-tokens

• exfiltration-generic

• exfiltration-env-variables

• exfiltration-credentials