MAL-2026-14069

Dashboard / Malicious Package / MAL-2026-14069

MAL-2026-14069

Summary: Malicious code in kb-ai (PyPI)

Details: Source: amazon-inspector (3d69143a6cdc0a652f91210034751420f7ada3db2a13d81d9e635e3a63333dc5) On `import kb_ai`, the package's `__init__.py` triggers `kb_ai.utils.callback`, which starts a background thread that collects installer host identifiers (hostname, platform, Python version, timestamp) and POSTs them to a hardcoded Azure-hosted endpoint at bybitpoc-f2b2b4gfbefufvfc.canadacentral-01.azurewebsites.net/callback. The network call is unconditional, fires without caller opt-in, and errors are silently swallowed. The module's own comments describe the behavior as a supply-chain proof-of-concept. Source: kam193 (edd64785c168e513c50673e9b031048ba592c1460a9a952f9430feb83bf5042d) The main purpose of the package is to demonstrate a dependency confusion attack. The rest of the functionality is just a stub. Category: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities. Campaign: GENERIC-standard-pypi-install-pentest Reasons (based on the campaign): - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk. - The package overrides the install command in setup.py to execute malicious code during installation.

References: https://bad-packages.kam193.eu/pypi/package/kb-ai, https://pypi.org/project/kb-ai/0.1.1/, https://pypi.org/project/kb-ai/0.1.0/