{"id":"MAL-2026-17752","summary":"Malicious code in agentaix (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (c403a9ecab78c519698c7faebcb0f9de4f8af059a4c3f5803acf8c534923138a)\nOn `import agentaix`, `src/agentaix/__init__.py` executes `drop_readme_on_desktop()` at module top level, copying the bundled file `readme.txt` to `~/Desktop/readme.txt`. The file is not documentation: it is a Python remote-access client with a `#!/usr/bin/env python3` shebang that registers `username@hostname` with a hardcoded command-and-control server at `https://googleforum.pythonanywhere.com` and polls `/api/client/\u003cid\u003e/...` for operator commands. Handlers implement arbitrary shell execution via `subprocess.run(command, shell=True)` (`handle_exec`), arbitrary file read with base64-encoded upload back to the C2 (`handle_download`), plus `upload`, `delete`, `rename`, and `open` operations. The dropper stages the payload under a benign filename in a highly visible location to induce the user to run it; once run, the operator obtains interactive shell and arbitrary file read on the host, enabling theft of SSH keys, cloud credentials, and other secrets. `pyproject.toml` ships placeholder author metadata (`Your Name` / `you@example.com`, `github.com/yourname/agentaix`), consistent with an unattributed malicious upload.\n\n## Source: kam193 (f42a135102abc5c66418237d4c6d9f8ee608570f8d4d5146463924666e0338e1)\nThe package installs a persistent job that allows the attacker for exfiltrating files and executing remote code on the victim's machine.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-10-agentaix\n\n\nReasons (based on the campaign):\n\n\n - files-exfiltration\n\n\n - peristence-autorun\n\n\n - The package contains code to execute remote commands (probably limited to a specific set) on the victim's machine.\n\n\n - rat\n\n\n - persistence\n\n\n - Downloads and executes a remote malicious script.\n","modified":"2026-10-15T09:30:03.372025398Z","published":"2026-10-10T07:57:16Z","database_specific":{"malicious-packages-origins":[{"versions":["0.1.0","0.2.0"],"id":"pypi/2026-10-agentaix/agentaix","import_time":"2026-10-10T08:46:18.828291614Z","modified_time":"2026-10-10T07:57:16.609573Z","sha256":"fd321806b962224268527ea2f73221d5f6014beeca857682854fb5a5e85e5fb1","source":"kam193"},{"source":"amazon-inspector","versions":["0.2.0"],"id":"IN-MAL-2026-021360","import_time":"2026-10-11T14:17:59.19918417Z","modified_time":"2026-10-11T13:47:28Z","sha256":"360b4359c789a2bae94b30dbaf4b6ab61b64711fedf3447c8a064c6d7cf6ddd3"},{"import_time":"2026-10-11T14:18:00.805594059Z","modified_time":"2026-10-11T13:50:30Z","sha256":"c403a9ecab78c519698c7faebcb0f9de4f8af059a4c3f5803acf8c534923138a","source":"amazon-inspector","versions":["0.1.0"],"id":"IN-MAL-2026-021379"},{"source":"kam193","versions":["0.1.0","0.2.0"],"id":"pypi/2026-10-agentaix/agentaix","import_time":"2026-10-15T09:20:03.531998005Z","modified_time":"2026-10-10T07:57:16.609573Z","sha256":"f42a135102abc5c66418237d4c6d9f8ee608570f8d4d5146463924666e0338e1"}],"iocs":{"domains":["googleforum.pythonanywhere.com"],"urls":["https://raw.githubusercontent.com/anonrider404/pypl/9395c5802b11bc088925d7adf6e2f66b8b0709fd/readme.txt","https://raw.githubusercontent.com/anonrider404/pypl/refs/heads/main/readme.txt","https://github.com/anonrider404/pypl"]}},"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/agentaix"},{"type":"PACKAGE","url":"https://pypi.org/project/agentaix/0.2.0/"},{"type":"PACKAGE","url":"https://pypi.org/project/agentaix/0.1.0/"}],"affected":[{"package":{"name":"agentaix","ecosystem":"PyPI","purl":"pkg:pypi/agentaix"},"versions":["0.1.0","0.2.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/agentaix/MAL-2026-17752.json","cwes":[{"description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code","cweId":"CWE-506"},{"name":"Embedded Malicious Code","cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature."}],"indicators":{"evidence_files":[{"sha256":"4dee138d77c1b30b2d373f5619eca47976fe440876f02d3f9d7fe9fea5f5190e","tlsh":"26515346de1f9422c673c24f1811d467e32703839ed16516bcfd86b07f7607ac4a09ae","path":"src/agentaix/__init__.py"},{"sha256":"45b2f442c3133d3494511eff3b8ea249bb05418a57c4db7c827916588d11eff0","tlsh":"17021262dc8e646383b2b50cc424c561f69a1343e6165c17f9fc87a87f74732e2b16ae","path":"src/agentaix/readme.txt"}],"package_integrity":[{"hashes":{"sha256":"37af27d5d9fbf0748967527d1b5781c18a4580c4215cfb22adf48c9665cdf673","blake2b_256":"5cbfa07428658115dec08485e725f93f5990f100b9730b78775a18ff0936e12b","md5":"c97de92c6bab8ff1e6b0e182f4da801d"},"filename":"agentaix-0.2.0-py3-none-any.whl"},{"hashes":{"md5":"f07d6be912819033f1495b3d34900e01","sha256":"8d31929ff91e05916818f6ad1cda87c49f49fe475f1f3f92e786e51a3cc46856","blake2b_256":"f469c1341d5dd9e4703b99be5e037d56fcdd367b4994b238b766da0d7696f2dd"},"filename":"agentaix-0.2.0.tar.gz"}]}}}],"schema_version":"1.9.0","credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}