MalwarePublished 7 Nov 2026

qzc690382 (PyPI) · Malicious Code

Affects qzc690382Source GCVE Database

Malicious package : remove qzc690382 and rotate any secrets on hosts that installed it.

Data as of 7 Nov 2026, 12:17 UTC

Classification

Malicious package

Published to PyPI · OSV MAL-2026-18749

What to do

Remove qzc690382 from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
PyPIqzc690382	Affected =1.0.0	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The PyPI package 'qzc690382' version 1.0.0 contains malicious code that activates during installation. Its setup.py script writes and launches a persistent Python HTTP server on multiple ports, exposing a network-accessible shell that executes arbitrary shell commands received via HTTP GET requests. This backdoor runs with the privileges of the installing user and is unrelated to any legitimate functionality.

Impact

Successful installation of this package results in a persistent remote shell accessible over the network on multiple ports, allowing an attacker to execute arbitrary shell commands with the privileges of the installing user. This compromises the confidentiality, integrity, and availability of the affected system.

Defensive guidance

The package should be considered malicious and avoided. Users should uninstall the package if installed and remove any files created by the setup.py script, including the server script at /tmp/.kxs and the token file at /tmp/.kxq. Network monitoring for connections on the specified ports may help detect compromise.

Summary

The package 'qzc690382' on PyPI, version 1.0.0, is malicious. Instead of providing legitimate functionality, its setup.py script executes on installation and creates a persistent HTTP server listening on ports 9998, 9999, 8089, 8099, and 8899 bound to all network interfaces (0.0.0.0). This server accepts shell commands via a GET parameter 'c=' and executes them with subprocess.run using shell=True, gated only by a token stored in a temporary file. This results in a persistent, network-exposed remote shell running as the installing user, effectively compromising the host.

References

pypi.org/project/qzc690382/1.0.0/ (opens in a new tab)

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 7 Nov 2026, 12:17 UTC

Technical details

References

Community reviews