{"id":"MAL-2026-5876","title":"Malicious code in temp-development-package-test (PyPI)","summary":"Malicious code in temp-development-package-test (PyPI)","severity":"none","vendor":"temp-development-package-test","product":"temp-development-package-test","ecosystem":"pip","affected":["temp-development-package-test"],"published":"2026-06-16","updated":"2026-07-08","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/MAL-2026-5876","references":[{"url":"https://www.virustotal.com/gui/file/1a5beab4a6facb46b4afc5f8526e1327e6c7d740ccaf34c6a921ac18eff29427/detection"},{"url":"https://www.virustotal.com/gui/file/4c99c8edfc4444f46932f14afccb2952a3850df765765f9ac793d69f318c192f/detection"},{"url":"https://www.virustotal.com/gui/file/0649f50ead3695f41c1243883200bdb775410bcd8c8fb88277740a625a154e25"},{"url":"https://www.virustotal.com/gui/file/926e8f1a7f349ff1eef31f89fa8ffe265c30b92e310e8bea19962d38f8c32129"},{"url":"https://bad-packages.kam193.eu/pypi/package/temp-development-package-test"},{"url":"https://pypi.org/project/temp-development-package-test/0.1/"},{"url":"https://pypi.org/project/temp-development-package-test/0.3/"}],"tags":["osv","pip"],"ingestedAt":"2026-07-09T11:56:19.573Z","slug":"MAL-2026-5876","body":"## Overview\n\n\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (126aa8a85eddebf7fb68ce845c1fe85e9991a6584da5fe768aa4ffb1bd089592)\nsetup.py defines install_sitecustomize(), which copies src/temp_development_package_test/setup/sitecustomize.py into the active interpreter's site-packages as sitecustomize.py. Python auto-imports sitecustomize at every interpreter start, making this a classic persistence / auto-execute primitive that would run arbitrary code in every Python invocation in that environment. In this released tarball the source payload file is absent, so the install raises FileNotFoundError and no file is dropped — meaning this version causes no installer harm. However, the package name (\"temp-development-package-test\") plus the staged copy mechanism plus an unused `import base64` in setup.py indicates the author is iterating on a supply-chain primitive. A future release that includes the payload file would silently install a global Python interpreter hook on every `pip install`. Recommend human review of this maintainer/account and rejection of any subsequent version that ships the sitecustomize.py file.\n\n## Source: kam193 (5cdc1d94dd0cfb62a4a0267ae52bf1a72dfa31a6854196b4bb220759b7c6e878)\nStarting with version 0.4, package installs a sitecustomize.py that executes during Python engine initialization. The embeded code uses mshta to download malicious code, as in other packages from the campaign.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-06-easyaillm\n\n\nReasons (based on the campaign):\n\n\n - Downloads and executes a remote executable.\n\n\n - obfuscation\n\n\n - malware\n\n\n - tool:mshta\n\n\n## Affected packages\n\n- `temp-development-package-test`\n\n## Remediation\n\nRefer to the advisory for the patched release.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}