MalwarePublished 25 Sep 2026Updated 30 Sep 2026

my-private-pkg (PyPI) · Malicious Code

Affects my-private-pkgSource GCVE Database

Malicious package : remove my-private-pkg and rotate any secrets on hosts that installed it.

Data as of 26 Oct 2026, 16:22 UTC

Classification

Malicious package

Published to PyPI · OSV MAL-2026-17180

What to do

Remove my-private-pkg from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
PyPImy-private-pkg	Affected =99.1.1 =0.1.1 =99.11.2	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (d8008c5637dfae2dfc4162f1dd5152c5e90e03b0fc8593fda5055f44e9745b22) setup.py registers a custom install command (PostInstallCommand) that runs my_private_pkg/index.py automatically on `pip install`. That script gathers installer-side identifiers — os.getlogin(), socket.gethostname(), local IP address, os.getcwd(), platform.system() and platform.machine() — and POSTs them as JSON to a hardcoded collector URL at https://webhook.site/d4d1b01b-708a-40b9-b8c8-187eeecafeed. A duplicate of the exfiltration payload is shipped as vercel_runtime_python/index.py, and vercel_runtime_python/__init__.py contains the same PostInstallCommand wiring referencing my_private_pkg/index.py; the module name mimics Vercel's Python runtime. The package name and the internal vercel_runtime_python module name are consistent with a dependency-confusion lure targeting an internal `my-private-pkg` name and Vercel's runtime namespace: the only on-install effect is a reconnaissance beacon to an attacker-controlled webhook.site endpoint identifying the host that mistakenly resolved the public name.

Impact

The impact is limited to unauthorized collection and exfiltration of system environment information from hosts that install the malicious package. This reconnaissance data could aid attackers in profiling compromised systems for further attacks. There is no evidence of code execution beyond data exfiltration or direct system compromise from this package.

Defensive guidance

Users should avoid installing the my-private-pkg package version 99.1.1 from PyPI, especially if it is not an expected dependency. Verify package names carefully to prevent dependency confusion attacks. Since this is a malicious package published on PyPI, removing the package from environments where it was installed and auditing for any suspicious activity is recommended.

Summary

The my-private-pkg PyPI package registers a custom PostInstallCommand in setup.py that automatically executes my_private_pkg/index.py on pip install. This script gathers installer-side identifiers including os.getlogin(), socket.gethostname(), local IP address, current working directory, platform.system(), and platform.machine(), then sends this data as JSON to a hardcoded attacker-controlled webhook URL (https://webhook.site/d4d1b01b-708a-40b9-b8c8-187eeecafeed). The package also contains a vercel_runtime_python module with the same exfiltration payload and wiring, mimicking Vercel's Python runtime to facilitate dependency confusion attacks targeting internal package names. The malicious behavior is limited to reconnaissance beaconing with no further payload execution.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 25 Sep 2026, 04:43 UTC

Technical details

References

Community reviews