{"id":"MAL-2026-17921","title":"Malicious code in leakdeep (PyPI)","summary":"Malicious code in leakdeep (PyPI)","severity":"critical","exploited":true,"vendor":"leakdeep","product":"leakdeep","ecosystem":"pip","affected":["leakdeep"],"published":"2026-10-18","updated":"2026-10-18","sourceUpdated":"2026-10-18T02:00:13.189559227Z","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/MAL-2026-17921","references":[{"url":"https://pypi.org/project/leakdeep/2.6.4/"},{"url":"https://pypi.org/project/leakdeep/2.5.0/"},{"url":"https://pypi.org/project/leakdeep/2.6.6/"},{"url":"https://pypi.org/project/leakdeep/2.5.2/"},{"url":"https://pypi.org/project/leakdeep/2.6.0/"}],"tags":["osv","pip","malware"],"ingestedAt":"2026-10-18T11:51:09.855Z","slug":"MAL-2026-17921","body":"## Overview\n\n\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (c0818f9da5e7dc1413ff1b2a24d3cb53d0b49d06bd802502296d6d8e8e536fee)\nThe package presents itself as an OSINT / credential-leak intelligence framework with a search CLI, but the advertised SearchEngine.search is a stub returning an empty list. Every invocation of the CLI (cli.main) unconditionally starts a background thread via SystemInfo.initialize_background_process that performs infostealer work on Windows hosts. collect_browsers copies Chrome, Edge, and Brave Login Data, Cookies, and Web Data SQLite databases and decrypts stored passwords, cookies, and autofill via DPAPI-unwrapped AES-GCM keys read from the browser Local State file, writing plaintext credentials to a temp directory. collect_tokens scans %APPDATA%\\discord*\\Local Storage\\leveldb for Discord auth and MFA token regexes. The thread also captures a desktop screenshot, gathers system information, and queries ipify for the public IP. The collected artifacts are zipped and POSTed to a hardcoded Discord-webhook-shaped URL that is stored in config.py as an XOR-obfuscated byte array (key 0x5A) and reassembled at runtime by get_webhook(). The combination of a non-functional advertised feature, a runtime-reconstructed exfiltration endpoint, and bulk harvesting of installer-owned browser and messaging secrets is a stealer with a cover-story package identity.\n\n\n## Affected packages\n\n- `leakdeep`\n\n## Remediation\n\nRefer to the advisory for the patched release.","depth":"abyssal","depthScore":70,"depthScoreParts":{"impact":52.3,"likelihood":0,"exploitation":18,"ransomware":0},"changes":[]}