{"id":"MAL-2026-10756","title":"Malicious code in darkglitch (PyPI)","summary":"Malicious code in darkglitch (PyPI)","severity":"none","vendor":"darkglitch","product":"darkglitch","ecosystem":"pip","affected":["darkglitch"],"published":"2026-07-16","updated":"2026-07-16","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/MAL-2026-10756","references":[{"url":"https://pypi.org/project/darkglitch/1.2.0/"}],"tags":["osv","pip"],"ingestedAt":"2026-07-17T13:07:04.291Z","slug":"MAL-2026-10756","body":"## Overview\n\n\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (6d02eb8be388433532783a7bf88864824b50756b7ced4f8728721866740c5df1)\ndarkglitch 1.2.0 ships a listener mode (`-l -c`) that opens a WebSocket connection to the hardcoded signaling host `https://malware-signal.vercel.app/` and joins the fixed room `D4RKGLI7CH`. Incoming `remote-command` messages are passed directly into `subprocess.run(command, shell=True)` inside `_execute_command`, giving any party with access to that signaling server arbitrary shell execution on the host running the listener. `core/config.py` hardcodes the host and room. The `-r/--run` mode invokes PyInstaller with `--noconsole --onefile` to build `darkglitch_listener.exe`, a windowless Windows agent whose entry point immediately calls `asyncio.run(listen_bash_mode())`, packaging the same remote-shell listener as a hidden persistent agent. The self-labeling of the host as `malware-signal.vercel.app` and the room as `D4RKGLI7CH` matches the operational shape of a remote-access trojan.\n\n\n## Affected packages\n\n- `darkglitch`\n\n## Remediation\n\nRefer to the advisory for the patched release.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}