{"answers":{"affected":"1 open source package ship an affected version, including vlifegram.","exploited":"There is no known exploitation of MAL-2026-4773 in the wild and no public exploit code.","fix":"Remove the package from your dependencies and lockfiles, then rotate any secrets on machines where it was installed.","what":"MAL-2026-4773 is a malicious package in vlifegram, published on 20 May 2026."},"fix_prompt":"MAL-2026-4773 is a malicious package: vlifegram (PyPI). Every version was published to cause harm.\n\nTask:\n1. Search this repository's dependency manifests and lockfiles for the package, including transitive dependencies.\n2. If it is present, remove it, regenerate the lockfile with the project's package manager, and replace whatever it was used for.\n3. List any CI runners, developer machines or containers that installed it, so their secrets can be rotated.\n4. If the package is not used anywhere, say so and change nothing.\n\nReference: https://insights.sbomify.com/MAL-2026-4773/ (Markdown: https://insights.sbomify.com/MAL-2026-4773/index.md)","id":"MAL-2026-4773","markdown":"https://insights.sbomify.com/MAL-2026-4773/index.md","name":"MAL-2026-4773","record":{"aliases":[],"analysis":null,"analysis_generated_by":null,"assigner":null,"cpe":[],"cvss":{"score":null,"severity":null,"source":null,"vector":null,"version":null},"cwes":[],"description":"VLifeGram is published under its own name on PyPI but installs into the `pyrogram/` namespace and ships a Pyrogram fork at version 2.1.2.4. It adds an undocumented module `pyrogram/helpers/secret.py`. In `pyrogram/methods/utilities/start.py` (around line 73), `Client.start()` imports `pyrogram.helpers.secret` and invokes `secret.init(self)` whenever the running account is a bot. `secret.init` registers hidden Telegram message handlers gated by a hardcoded operator list `OWNERS = [842320686, 845521076, 1675073032]` (secret.py:91). The `/asu` and `/wann` commands pass message text to `exec(compile(...))`, executing arbitrary Python in the bot process; `/asi` and `/wann2` pass message text to `subprocess.run([\"/bin/bash\", \"-c\", cmd])`, giving full shell access on the host running the bot. Because the package installs into the `pyrogram` namespace, any existing project that does `from pyrogram import Client` will silently load this backdoored fork once VLifeGram is present in the environment, with no code change required. Network channel for command-and-control is Telegram itself (the same connection the legitimate library opens), so the backdoor blends into normal bot traffic. The three hardcoded operator IDs gain persistent remote Python and shell execution on every host that starts a bot using this library.","ecosystems":["PyPI"],"exploits":{"exploitdb":null,"first_seen":null,"github_poc":null,"max_poc_stars":null,"metasploit":null,"nuclei":null,"refs":[],"tier":null},"has_fix":false,"headline":"Malicious code in vlifegram (PyPI)","id":"MAL-2026-4773","indexable":true,"kev":null,"kind":"malicious","links":{"ecosystem":"PyPI","product":null,"products":[],"type":null,"year":"2026"},"n_packages":1,"n_references":null,"packages":[{"ecosystem":"PyPI","fixed":[],"introduced":[],"last_affected":[],"package":"vlifegram","purl":"pkg:pypi/vlifegram","source":"MAL-2026-4773"}],"products":null,"published":"2026-05-20","related":[],"sources":[{"class":"attribution","licence":"Apache-2.0","name":"OpenSSF Malicious Packages","prefix":"MAL"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":null,"updated":null,"vendors":null},"summary":null,"url":"https://insights.sbomify.com/MAL-2026-4773/"}