Malicious code in azure-langchain-example (PyPI)
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (1cffc3a51858b1b7a17ff0edfd2eeae6383e83b4eff5bc078f7b1d4f5ba36ad2) On `import azure_langchain_example`, the package's __init__.py starts a background daemon thread that issues a GET request to https://litellm.adversarylabx.com/.telemetry with the installer's hostname, resolved IP address, a timestamp, and the package name in the query string, using urllib.request.urlopen with a short timeout and silenced exceptions. The destination host is unrelated to the package's advertised purpose (a minimal LangChain wrapper for Azure OpenAI) and to any Azure or LangChain publisher domain. The behavior fires unconditionally at import without user consent or opt-out and is not mentioned in the README. Package metadata is placeholder (`Your Name `) and the name resembles the Azure+LangChain ecosystem, consistent with a lookalike used to profile installers who mistype or guess an Azure/LangChain integration package name. An in-source comment labeling the request a harmless canary is author-controlled text that does not change the observed behavior. ## Source: kam193 (59c10650dde5db077b435212025a4cb48ab69daf76022cb932dfec98beea4479) Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared
MAL-2026-17213
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:MAL-2026-17213
azure-langchain-example
Source reference: /affected/0/package/name
- Affected versions
- 0.1.0
Source reference:
/affected/0/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"package": {
"name": "azure-langchain-example",
"purl": "pkg:pypi/azure-langchain-example",
"ecosystem": "PyPI"
},
"versions": [
"0.1.0"
],
"database_specific": {
"cwes": [
{
"name": "Embedded Malicious Code",
"cweId": "CWE-506",
"description": "The product contains code that appears to be malicious in nature."
}
],
"source": "https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/azure-langchain-example/MAL-2026-17213.json",
"indicators": {
"evidence_files": [
{
"path": "src/azure_langchain_example/__init__.py",
"tlsh": "4921e0e1615809e6f13b4e9f113292b03b321d03d9026cbfb9ac578c9fca576a911c58",
"sha256": "de3a015c4fd68d12dbff0e3f8f3a0584ce6088b6da4ab875f1028e24cbfe6324"
},
{
"path": "pyproject.toml",
"tlsh": "4411ef9bacda3eb5a7c11045500a0801ae709d77128464dda7ebc30ed259d9794fc43d",
"sha256": "545599064704fba9d3402a5d0616b504b9ab4cadeb036084e9217bf716e76e30"
}
],
"package_integrity": [
{
"hashes": {
"md5": "07563554eac7f68806e553dd0cc8fe02",
"sha256": "4108d947939529d4ed630b623a2a4c4051c4bb70620fe25df7817fd025e1be38",
"blake2b_256": "fda88ec8f05648e5acce828b1acaf317a0428fc8cfc5fa6bf91a5f22c77223e6"
},
"filename": "azure_langchain_example-0.1.0-py3-none-any.whl"
},
{
"hashes": {
"md5": "99ce718b285d047e442942d0aa1d31fe",
"sha256": "1b579b3c91692bc05fef6b96ea9499c738f9fd4135a477c8c4edc0e15aec0bc5",
"blake2b_256": "ab07e73d3ec1041bb6e05e0660d8503e8ebe1f3f9440a893a89699c671d136a2"
},
"filename": "azure_langchain_example-0.1.0.tar.gz"
}
]
}
}
}
]Publisher severity
No explicit severity was provided.
- Event
- #24120 · Revision 1
- Added to Heist Feed
- Publisher date