{"answers":{"affected":"1 open source package ship an affected version, including libhmac.","exploited":"There is no known exploitation of MAL-2026-4194 in the wild and no public exploit code.","fix":"Remove the package from your dependencies and lockfiles, then rotate any secrets on machines where it was installed.","what":"MAL-2026-4194 is a malicious package in libhmac, published on 20 May 2026."},"fix_prompt":"MAL-2026-4194 is a malicious package: libhmac (PyPI). Every version was published to cause harm.\n\nTask:\n1. Search this repository's dependency manifests and lockfiles for the package, including transitive dependencies.\n2. If it is present, remove it, regenerate the lockfile with the project's package manager, and replace whatever it was used for.\n3. List any CI runners, developer machines or containers that installed it, so their secrets can be rotated.\n4. If the package is not used anywhere, say so and change nothing.\n\nReference: https://insights.sbomify.com/MAL-2026-4194/ (Markdown: https://insights.sbomify.com/MAL-2026-4194/index.md)","id":"MAL-2026-4194","markdown":"https://insights.sbomify.com/MAL-2026-4194/index.md","name":"MAL-2026-4194","record":{"aliases":[],"analysis":null,"analysis_generated_by":null,"assigner":null,"cpe":[],"cvss":{"score":null,"severity":null,"source":null,"vector":null,"version":null},"cwes":[],"description":"The PyPI name 'libhmac' matches the well-known libyal/libhmac C forensics library (HMAC primitive), but the package contents have nothing to do with HMAC primitives. The shipped code is a complete Chromium-family browser-extension hijacking toolkit. ChromeManager.ReplaceInPlaceExtensions (src/libhmac/extension_patcher.py) enumerates all Chrome/Edge/Brave/Vivaldi profiles for the current user, copies attacker payload bytes (`dm_core_bg.js`, `dm_core_bg.wasm`) into each extension's version directory, rewrites `manifest.json` to add `\u003call_urls\u003e` host permissions and a relaxed `content_security_policy` (wasm-unsafe-eval, broad connect-src), strips `extensions.ui.developer_mode_encrypted_hash` from Chrome's Secure Preferences (src/libhmac/preferences_handler.py:84), and recomputes Chrome's `super_mac` using the per-browser HMAC seed extracted from `resources.pak` (src/libhmac/hmac_calculator.py:223) to defeat tamper detection. The advertised purpose in pyproject.toml is 'Chromium extension host sync, CSP relaxation, and in-place extension patching'. Author metadata is a placeholder ('libhmac maintainers', no email, no homepage, no repo) under a 'Proprietary' license. A developer who runs `pip install libhmac` expecting the libyal HMAC library instead pulls in a browser-compromise toolkit; downstream packages can `import libhmac` to weaponize any installer's browser profiles. The combination of name impersonation of an established OSS library, anonymous maintainer identity, and offensive capability with no legitimate dual-use framing is the fingerprint of namespace-abuse malware infrastructure.\n\nThe package is a loader of an infostealer that modifies browser extensions to intercept credentials and cryptowallet data. The installation is not automatic, the code is intended to be triggered externally, but includes hardcoded exfiltration target.\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\nCampaign: 2026-05-libhmac\n\nReasons (based on the campaign):\n\n - crypto-related\n\n - exfiltration-credentials\n\n - exfiltration-crypto\n\n - exfiltration-browser-data","ecosystems":["PyPI"],"exploits":{"exploitdb":null,"first_seen":null,"github_poc":null,"max_poc_stars":null,"metasploit":null,"nuclei":null,"refs":[],"tier":null},"has_fix":false,"headline":"Malicious code in libhmac (PyPI)","id":"MAL-2026-4194","indexable":true,"kev":null,"kind":"malicious","links":{"ecosystem":"PyPI","product":null,"products":[],"type":null,"year":"2026"},"n_packages":1,"n_references":null,"packages":[{"ecosystem":"PyPI","fixed":[],"introduced":[],"last_affected":[],"package":"libhmac","purl":"pkg:pypi/libhmac","source":"MAL-2026-4194"}],"products":null,"published":"2026-05-20","related":[],"sources":[{"class":"attribution","licence":"Apache-2.0","name":"OpenSSF Malicious Packages","prefix":"MAL"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":null,"updated":null,"vendors":null},"summary":null,"url":"https://insights.sbomify.com/MAL-2026-4194/"}