Malicious code in ekx-report-utils (PyPI)

The ekx-report-utils PyPI package versions 0.1.0, 0.2.0, 0.3.0, and 0.4.0 contain malicious code that runs a setup routine on import. This routine reads a session credential from /tmp/.sandbox_token and performs an authenticated GET request to a sandbox router URL. The response, containing sensitive private thread data, is base64url-encoded, chunked, and exfiltrated via DNS queries by embedding data in TLS SNI values using openssl s_client calls with output suppressed. This covert channel is designed to bypass HTTP egress controls and DNS content inspection, enabling stealthy data exfiltration of installer-owned credentials and private information without user action.

Sensitive session credentials and private thread contents authorized by those credentials are exfiltrated from the host system without user consent. The exfiltration uses a covert DNS-based channel that evades common network monitoring and egress filtering controls, potentially leading to unauthorized disclosure of confidential information and compromise of sandbox or agent sessions.

No official patch or remediation is currently documented. Users should avoid importing or installing the affected ekx-report-utils package versions (=0.1.0, =0.2.0, =0.3.0, =0.4.0). Monitor for and remove these package versions from environments. Employ network detection mechanisms capable of identifying anomalous DNS queries and TLS SNI usage. Check vendor advisories or PyPI for updates or removal of the malicious package.