{"answers":{"affected":"1 open source package ship an affected version, including natazx.","exploited":"There is no known exploitation of MAL-2026-3778 in the wild and no public exploit code.","fix":"Remove the package from your dependencies and lockfiles, then rotate any secrets on machines where it was installed.","what":"MAL-2026-3778 is a malicious package in natazx, published on 14 May 2026."},"fix_prompt":"MAL-2026-3778 is a malicious package: natazx (PyPI). Every version was published to cause harm.\n\nTask:\n1. Search this repository's dependency manifests and lockfiles for the package, including transitive dependencies.\n2. If it is present, remove it, regenerate the lockfile with the project's package manager, and replace whatever it was used for.\n3. List any CI runners, developer machines or containers that installed it, so their secrets can be rotated.\n4. If the package is not used anywhere, say so and change nothing.\n\nReference: https://insights.sbomify.com/MAL-2026-3778/ (Markdown: https://insights.sbomify.com/MAL-2026-3778/index.md)","id":"MAL-2026-3778","markdown":"https://insights.sbomify.com/MAL-2026-3778/index.md","name":"MAL-2026-3778","record":{"aliases":[],"analysis":null,"analysis_generated_by":null,"assigner":null,"cpe":[],"cvss":{"score":null,"severity":null,"source":null,"vector":null,"version":null},"cwes":[],"description":"On `import natazx`, the package's top-level code executes several installer-hostile actions without consent: (1) it unconditionally overwrites the host's DNS configuration at `/etc/resolv.conf` (and the Termux equivalent) to point at 1.1.1.1/1.0.0.1 with aggressive timeouts — a system-wide change affecting every process on the host; (2) it runs `pkill -9 tor` and spawns a detached Tor daemon via `start_new_session=True` using a torrc written to `/tmp/torrc`, establishing a process that outlives the Python interpreter; (3) it shells out to `pip install` for five unpinned packages (colorama, requests, pycryptodome, urllib3, cfonts) bypassing declared dependencies (`dependencies = []` in pyproject.toml), so the installer's environment is silently mutated with whatever the current PyPI releases are; (4) it fetches a JSON allowlist from a mutable GitHub main-branch ref (`raw.githubusercontent.com/septianhdnatta/idd/refs/heads/main/device.json`), builds a device fingerprint from serial number, build.prop, platform, uid, and timezone, and `sys.exit(1)`s if the installer's fingerprint is not on the author's list. The package's advertised function (`main()`) is a ToS-violating mass account-registration tool against Garena / Free Fire endpoints (`100067.connect.garena.com`, `loginbp.ggblueshark.com`, `loginbp.common.ggbluefox.com`) using hardcoded HMAC and AES-CBC keys, routed through 40 embedded HTTP proxy credentials on ten rotating IPs. The combination of import-time system-file destruction (resolv.conf overwrite), persistence (detached Tor daemon), silent environment mutation (unpinned pip installs), remote kill-switch (device-fingerprint allowlist on a mutable GitHub ref), and abuse-tool payload makes this package hostile to any environment in which it is installed.","ecosystems":["PyPI"],"exploits":{"exploitdb":null,"first_seen":null,"github_poc":null,"max_poc_stars":null,"metasploit":null,"nuclei":null,"refs":[],"tier":null},"has_fix":false,"headline":"Malicious code in natazx (PyPI)","id":"MAL-2026-3778","indexable":true,"kev":null,"kind":"malicious","links":{"ecosystem":"PyPI","product":null,"products":[],"type":null,"year":"2026"},"n_packages":1,"n_references":null,"packages":[{"ecosystem":"PyPI","fixed":[],"introduced":[],"last_affected":[],"package":"natazx","purl":"pkg:pypi/natazx","source":"MAL-2026-3778"}],"products":null,"published":"2026-05-14","related":[],"sources":[{"class":"attribution","licence":"Apache-2.0","name":"OpenSSF Malicious Packages","prefix":"MAL"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":null,"updated":null,"vendors":null},"summary":null,"url":"https://insights.sbomify.com/MAL-2026-3778/"}