{"id":"MAL-2026-15931","title":"Malicious code in metricboxlite (PyPI)","summary":"Malicious code in metricboxlite (PyPI)","severity":"critical","exploited":true,"vendor":"metricboxlite","product":"metricboxlite","ecosystem":"pip","affected":["metricboxlite"],"published":"2026-09-04","updated":"2026-09-09","sourceUpdated":"2026-09-09T05:30:05.127630169Z","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/MAL-2026-15931","references":[{"url":"https://bad-packages.kam193.eu/pypi/package/metricboxlite"},{"url":"https://pypi.org/project/MetricBoxLite/2.0/"},{"url":"https://pypi.org/project/MetricBoxLite/1.0/"}],"tags":["osv","pip","malware"],"ingestedAt":"2026-09-04T19:32:58.678Z","slug":"MAL-2026-15931","body":"## Overview\n\n\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (d5a511a75c8c42dcd677dd3814265d3befefa7f339bdc6b0336788635813e837)\nMetricBoxLite 1.0 collects the installer's username (getpass.getuser) and hostname (socket.gethostname), JSON-encodes them, and POSTs the payload to a hardcoded remote endpoint at https://kznkrxfzy4xgib6ejfh8etegndp3kwguf.oast.invalid/collect. The beacon fires from two independent paths: setup.py calls the reporter at module top level, so it runs during `pip install` of the sdist, and metricboxlite/__init__.py performs the same collect-and-POST at top level, so any `import metricboxlite` also phones home. Network errors are silently swallowed. The destination is an OAST/out-of-band-callback host that is not first-party to the package or its ecosystem, and the collected fields are installer identity rather than package operational data.\n\n## Source: kam193 (83407b9909ebc137e4d47fbb7fe2672a5920dd22bfd7d86ce8edb536bdd5fcab)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n\n\n## Affected packages\n\n- `metricboxlite`\n\n## Remediation\n\nRefer to the advisory for the patched release.","depth":"abyssal","depthScore":70,"depthScoreParts":{"impact":52.3,"likelihood":0,"exploitation":18,"ransomware":0},"changes":[{"seq":202653,"id":"MAL-2026-15931","ts":1789400125337,"field":"exploited","old":"false","new":"true"},{"seq":202652,"id":"MAL-2026-15931","ts":1789400125337,"field":"severity","old":"none","new":"critical"},{"seq":201380,"id":"MAL-2026-15931","ts":1789397625460,"field":"exploited","old":"true","new":"false"},{"seq":201379,"id":"MAL-2026-15931","ts":1789397625460,"field":"severity","old":"critical","new":"none"},{"seq":200073,"id":"MAL-2026-15931","ts":1789395588361,"field":"exploited","old":"false","new":"true"},{"seq":200072,"id":"MAL-2026-15931","ts":1789395588361,"field":"severity","old":"none","new":"critical"},{"seq":199310,"id":"MAL-2026-15931","ts":1789392266682,"field":"exploited","old":"true","new":"false"},{"seq":199309,"id":"MAL-2026-15931","ts":1789392266682,"field":"severity","old":"critical","new":"none"},{"seq":197643,"id":"MAL-2026-15931","ts":1789384308170,"field":"exploited","old":"false","new":"true"},{"seq":197642,"id":"MAL-2026-15931","ts":1789384308170,"field":"severity","old":"none","new":"critical"},{"seq":196917,"id":"MAL-2026-15931","ts":1789383784908,"field":"exploited","old":"true","new":"false"},{"seq":196916,"id":"MAL-2026-15931","ts":1789383784908,"field":"severity","old":"critical","new":"none"},{"seq":195821,"id":"MAL-2026-15931","ts":1789380596287,"field":"exploited","old":"false","new":"true"},{"seq":195820,"id":"MAL-2026-15931","ts":1789380596287,"field":"severity","old":"none","new":"critical"},{"seq":194772,"id":"MAL-2026-15931","ts":1789378794198,"field":"exploited","old":"true","new":"false"},{"seq":194771,"id":"MAL-2026-15931","ts":1789378794198,"field":"severity","old":"critical","new":"none"},{"seq":193559,"id":"MAL-2026-15931","ts":1789376561298,"field":"exploited","old":"false","new":"true"},{"seq":193558,"id":"MAL-2026-15931","ts":1789376561298,"field":"severity","old":"none","new":"critical"},{"seq":192346,"id":"MAL-2026-15931","ts":1789373645046,"field":"exploited","old":"true","new":"false"},{"seq":192345,"id":"MAL-2026-15931","ts":1789373645046,"field":"severity","old":"critical","new":"none"},{"seq":191131,"id":"MAL-2026-15931","ts":1789369518090,"field":"exploited","old":"false","new":"true"},{"seq":191130,"id":"MAL-2026-15931","ts":1789369518090,"field":"severity","old":"none","new":"critical"},{"seq":189918,"id":"MAL-2026-15931","ts":1789368466054,"field":"exploited","old":"true","new":"false"},{"seq":189917,"id":"MAL-2026-15931","ts":1789368466054,"field":"severity","old":"critical","new":"none"},{"seq":188701,"id":"MAL-2026-15931","ts":1789365252058,"field":"exploited","old":"false","new":"true"},{"seq":188700,"id":"MAL-2026-15931","ts":1789365252058,"field":"severity","old":"none","new":"critical"},{"seq":187488,"id":"MAL-2026-15931","ts":1789363481960,"field":"exploited","old":"true","new":"false"},{"seq":187487,"id":"MAL-2026-15931","ts":1789363481960,"field":"severity","old":"critical","new":"none"},{"seq":186274,"id":"MAL-2026-15931","ts":1789361250330,"field":"exploited","old":"false","new":"true"},{"seq":186273,"id":"MAL-2026-15931","ts":1789361250330,"field":"severity","old":"none","new":"critical"},{"seq":185061,"id":"MAL-2026-15931","ts":1789358408058,"field":"exploited","old":"true","new":"false"},{"seq":185060,"id":"MAL-2026-15931","ts":1789358408058,"field":"severity","old":"critical","new":"none"},{"seq":183310,"id":"MAL-2026-15931","ts":1789354334534,"field":"exploited","old":"false","new":"true"},{"seq":183309,"id":"MAL-2026-15931","ts":1789354334534,"field":"severity","old":"none","new":"critical"},{"seq":182103,"id":"MAL-2026-15931","ts":1789353336986,"field":"exploited","old":"true","new":"false"},{"seq":182102,"id":"MAL-2026-15931","ts":1789353336986,"field":"severity","old":"critical","new":"none"},{"seq":180896,"id":"MAL-2026-15931","ts":1789350308610,"field":"exploited","old":"false","new":"true"},{"seq":180895,"id":"MAL-2026-15931","ts":1789350308610,"field":"severity","old":"none","new":"critical"},{"seq":179689,"id":"MAL-2026-15931","ts":1789348312772,"field":"exploited","old":"true","new":"false"},{"seq":179688,"id":"MAL-2026-15931","ts":1789348312772,"field":"severity","old":"critical","new":"none"},{"seq":178482,"id":"MAL-2026-15931","ts":1789346387810,"field":"exploited","old":"false","new":"true"},{"seq":178481,"id":"MAL-2026-15931","ts":1789346387810,"field":"severity","old":"none","new":"critical"},{"seq":177275,"id":"MAL-2026-15931","ts":1789343192681,"field":"exploited","old":"true","new":"false"},{"seq":177274,"id":"MAL-2026-15931","ts":1789343192681,"field":"severity","old":"critical","new":"none"},{"seq":175392,"id":"MAL-2026-15931","ts":1789334899858,"field":"exploited","old":"false","new":"true"},{"seq":175391,"id":"MAL-2026-15931","ts":1789334899858,"field":"severity","old":"none","new":"critical"},{"seq":174187,"id":"MAL-2026-15931","ts":1789333720603,"field":"exploited","old":"true","new":"false"},{"seq":174186,"id":"MAL-2026-15931","ts":1789333720603,"field":"severity","old":"critical","new":"none"},{"seq":173001,"id":"MAL-2026-15931","ts":1789331109294,"field":"exploited","old":"false","new":"true"},{"seq":173000,"id":"MAL-2026-15931","ts":1789331109294,"field":"severity","old":"none","new":"critical"}]}