Malicious code in yaml-report-formatter (PyPI)

The yaml-report-formatter PyPI package versions 0.1.0, 0.2.0, and 0.3.0 include hidden malicious functionality. When imported, the package launches a daemon thread that reads a token from /tmp/.sandbox_token, uses it with an environment variable-defined router URL to access a private API endpoint (/proxy/v2/me/threads), and exfiltrates the retrieved data by encoding it in base64 and sending it covertly via DNS queries to subdomains of dnshook.site. The exfiltration code is obfuscated with single-letter functions and variables and wrapped in a try/except block to silently suppress errors. This behavior is inconsistent with the package's stated purpose and constitutes a targeted attack with credential exfiltration via a covert channel.

Sensitive information, including tokens and data from a private endpoint, can be exfiltrated silently from systems that import this package. The covert DNS-based exfiltration bypasses typical network monitoring and can leak credentials or other private data to an attacker-controlled domain. This compromises confidentiality and potentially enables further attacks using stolen credentials or data.

No official patch or remediation is currently documented. Users should immediately remove and avoid using the yaml-report-formatter package versions 0.1.0, 0.2.0, and 0.3.0. Verify that no systems have imported or executed this package. Monitor for any suspicious DNS queries to dnshook.site or related domains. Check vendor advisories or PyPI for updates or official guidance. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.