Malicious code in infogram-bot (PyPI)
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (08547edeec8e522d84b40fd8236878da54c888ede86588be3913a1c37cd2b245) [email protected] implements a Telegram bot that accepts text messages from remote parties and passes them directly to subprocess.check_output(cmd, shell=True,...) on the host running the package, giving any authorized Telegram user (and, for the.sh command, any member of a group chat) arbitrary shell command execution with the privileges of the process. Additional handlers expose 'get all' (walks the working directory, zips it, and uploads all files in 50MB chunks via reply_document), 'take <file>' / 'tk a' (streams any requested file or all files under the cwd back to the Telegram chat), '.printenv' (iterates os.environ and sends every environment variable value to the chat), and '.grep' (greps environment values and files for arbitrary substrings and returns matches). Together these provide a full remote-shell backdoor plus a data-exfiltration channel to a destination the host owner did not configure at runtime. pyproject.toml also ships placeholder maintainer metadata (author 'Aapka Naam' / [email protected], Homepage containing the literal 'YOUR_GITHUB_USERNAME'), consistent with low-attribution publication. ## Source: kam193 (454fa32963f58275e35167d59dd581240725e099682e76e44b6fca7b22332cb0) The package provides Telegram-based remote access to the machine it runs on. It was deliberately created and used to hack other machines, exfiltrate files and credentials. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-08-httpz-requests Reasons (based on the campaign): - files-exfiltration - rat - persistence - uses-telegram-bot - obfuscation - native-extension
AI Analysis
Technical Summary
infogram-bot versions 1.0.0 to 1.9.0 implement a Telegram bot that accepts text messages from remote users and executes them as shell commands on the host via subprocess.check_output(cmd, shell=True). It exposes handlers that allow full remote shell access and data exfiltration, including walking the working directory, zipping and uploading files in chunks, streaming requested files back to Telegram, and leaking environment variables. The package includes placeholder maintainer metadata consistent with low attribution and was deliberately designed to hack machines and steal files and credentials.
Potential Impact
An attacker with access to the Telegram bot can execute arbitrary shell commands on the host with the privileges of the running process, effectively gaining full remote control. The attacker can also exfiltrate files and environment variables, leading to potential data breaches and credential theft. This creates a severe security risk including unauthorized access, data loss, and persistence on the compromised system.
Mitigation Recommendations
No official patch or remediation is currently documented. Users should immediately uninstall the infogram-bot package and avoid running it in any environment. Since this is a malicious package, do not trust or use any versions listed. Monitor for any unauthorized Telegram bots or suspicious processes and remove them. Check for any signs of compromise if this package was installed.
Malicious code in infogram-bot (PyPI)
Description
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (08547edeec8e522d84b40fd8236878da54c888ede86588be3913a1c37cd2b245) [email protected] implements a Telegram bot that accepts text messages from remote parties and passes them directly to subprocess.check_output(cmd, shell=True,...) on the host running the package, giving any authorized Telegram user (and, for the.sh command, any member of a group chat) arbitrary shell command execution with the privileges of the process. Additional handlers expose 'get all' (walks the working directory, zips it, and uploads all files in 50MB chunks via reply_document), 'take <file>' / 'tk a' (streams any requested file or all files under the cwd back to the Telegram chat), '.printenv' (iterates os.environ and sends every environment variable value to the chat), and '.grep' (greps environment values and files for arbitrary substrings and returns matches). Together these provide a full remote-shell backdoor plus a data-exfiltration channel to a destination the host owner did not configure at runtime. pyproject.toml also ships placeholder maintainer metadata (author 'Aapka Naam' / [email protected], Homepage containing the literal 'YOUR_GITHUB_USERNAME'), consistent with low-attribution publication. ## Source: kam193 (454fa32963f58275e35167d59dd581240725e099682e76e44b6fca7b22332cb0) The package provides Telegram-based remote access to the machine it runs on. It was deliberately created and used to hack other machines, exfiltrate files and credentials. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-08-httpz-requests Reasons (based on the campaign): - files-exfiltration - rat - persistence - uses-telegram-bot - obfuscation - native-extension
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
infogram-bot versions 1.0.0 to 1.9.0 implement a Telegram bot that accepts text messages from remote users and executes them as shell commands on the host via subprocess.check_output(cmd, shell=True). It exposes handlers that allow full remote shell access and data exfiltration, including walking the working directory, zipping and uploading files in chunks, streaming requested files back to Telegram, and leaking environment variables. The package includes placeholder maintainer metadata consistent with low attribution and was deliberately designed to hack machines and steal files and credentials.
Potential Impact
An attacker with access to the Telegram bot can execute arbitrary shell commands on the host with the privileges of the running process, effectively gaining full remote control. The attacker can also exfiltrate files and environment variables, leading to potential data breaches and credential theft. This creates a severe security risk including unauthorized access, data loss, and persistence on the compromised system.
Mitigation Recommendations
No official patch or remediation is currently documented. Users should immediately uninstall the infogram-bot package and avoid running it in any environment. Since this is a malicious package, do not trust or use any versions listed. Monitor for any unauthorized Telegram bots or suspicious processes and remove them. Check for any signs of compromise if this package was installed.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- MAL-2026-14131
- Osv Schema Version
- 1.7.4
- Ecosystems
- ["PyPI"]
Threat ID: 6a84fa65c6e8be0332ef1303
Added to database: 08/19/2026, 00:35:49 UTC
Last enriched: 08/19/2026, 00:51:15 UTC
Last updated: 10/02/2026, 13:49:45 UTC
Views: 65
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.