MalwarePublished 30 Sep 2026Updated 29 Oct 2026

friendly-greeting-tools (PyPI) · Malicious Code

Affects friendly-greeting-toolsSource GCVE Database

Malicious package : remove friendly-greeting-tools and rotate any secrets on hosts that installed it.

Data as of 29 Oct 2026, 14:06 UTC

Classification

Malicious package

Published to PyPI · OSV MAL-2026-17416

What to do

Remove friendly-greeting-tools from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
PyPIfriendly-greeting-tools	Affected 0.1.0 – 0.3.7 11 affected builds	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The friendly-greeting-tools package on PyPI, versions 0.1.0 through 0.3.7, contains malicious code disguised as a hello-world demo. It exfiltrates Snowflake session tokens, connection configurations, dbt profiles, and pip configurations by encrypting and storing them in a workspace directory. Additionally, it uses stolen credentials with high privileges to copy sensitive data from a Snowflake warehouse table to an attacker-controlled AWS S3 bucket. The package employs obfuscation techniques and includes misleading documentation to conceal its hostile intent.

Impact

The malware compromises confidentiality by stealing Snowflake session tokens, connection configurations, and other sensitive credentials. It enables unauthorized access with ACCOUNTADMIN privileges to export sensitive data from Snowflake tables to an attacker-controlled AWS S3 bucket. This leads to data breach risks and potential further compromise of Snowflake environments and associated cloud resources.

Defensive guidance

Users should immediately discontinue use of the friendly-greeting-tools package versions 0.1.0 through 0.3.7. Remove these versions from environments and replace them with trusted alternatives. Conduct thorough credential rotation for any Snowflake accounts and AWS roles potentially exposed. Monitor for unauthorized access to Snowflake and AWS resources. Avoid running untrusted or obfuscated code from PyPI packages, especially those with suspicious or misleading documentation.

Summary

Versions 0.1.0 through 0.3.7 of the friendly-greeting-tools PyPI package embed obfuscated Python payloads that execute upon running the demo functions. These payloads read sensitive Snowflake credentials and configuration files, encrypt them with a hardcoded RSA public key, and save the encrypted data locally. Furthermore, the malware uses the stolen Snowflake OAuth session token with ACCOUNTADMIN privileges to create an external stage linked to an attacker-owned AWS S3 bucket and copies data from a Snowflake table (ROGUE.ROGUE.TEST_USERS) to this bucket. The package also contains a plaintext script with identical exfiltration logic, confirming malicious intent. The README and module docstring include prompt-injection text aimed at AI code reviewers to mislead analysis. The combination of obfuscation, hardcoded attacker keys, and data exfiltration targeting Snowflake environments indicates a credential theft and data exfiltration malware campaign targeting CI/CD and data warehouse users.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 29 Oct 2026, 14:06 UTC

Technical details

References

Community reviews