Malicious code in friendly-greeting-tools (PyPI)
Versions 0.1.0 through 0.3.6 of friendly-greeting-tools disguise encoded Snowflake credential and data theft routines as a hello-world demo. In versions through 0.3.5, the default run_demo payload reads the Snowflake session token, connection configuration, dbt profiles, and pip configuration, then stages encrypted copies in /workspace using a hard-coded RSA public key; every affected version also contains a payload that uses the session token with ACCOUNTADMIN to copy ROGUE.ROGUE.TEST_USERS to the hard-coded s3://pkusinski-external/ bucket. Version 0.3.6 makes the Snowflake external-storage and data-copy routine the default run_demo payload and suppresses query failures. Versions 0.3 through 0.3.6 additionally contain a payload that queries the table and builds a follow-on package containing the returned data, while the README and CLI describe the behavior only as a demo and a print-only payload. --- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (4d584c571cf5d112735aefd07c78bc19659af32f5950b1331a4970cba97c9707) The package presents itself as a harmless greeting demo but src/friendly_greeting/main.py ships two base64+gzip-encoded Python blobs (DEMO_EN and DEMO_ST) that are decoded and executed via exec(gzip.decompress(base64.b64decode(...))) from run_demo()/run_encoded_demo(). The first decoded payload reads /snowflake/session/token, /root/.snowflake/connections.toml, /root/.dbt/profiles.yml and /snowflake/secrets/pip.conf, Fernet-encrypt
MAL-2026-17416
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:MAL-2026-17416
friendly-greeting-tools
Source reference: /affected/0/package/name
- Affected versions
- 0.1.0
Source reference:
/affected/0/versions0.1.1Source reference:
/affected/0/versions0.2Source reference:
/affected/0/versions0.3Source reference:
/affected/0/versions0.3.1Source reference:
/affected/0/versions0.3.2Source reference:
/affected/0/versions0.3.3Source reference:
/affected/0/versions0.3.4Source reference:
/affected/0/versions0.3.5Source reference:
/affected/0/versions0.3.6Source reference:
/affected/0/versions0.3.7Source reference:
/affected/0/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"package": {
"name": "friendly-greeting-tools",
"purl": "pkg:pypi/friendly-greeting-tools",
"ecosystem": "PyPI"
},
"versions": [
"0.1.0",
"0.1.1",
"0.2",
"0.3",
"0.3.1",
"0.3.2",
"0.3.3",
"0.3.4",
"0.3.5",
"0.3.6",
"0.3.7"
],
"database_specific": {
"cwes": [
{
"name": "Embedded Malicious Code",
"cweId": "CWE-506",
"description": "The product contains code that appears to be malicious in nature."
},
{
"name": "Embedded Malicious Code",
"cweId": "CWE-506",
"description": "The product contains code that appears to be malicious in nature."
},
{
"name": "Embedded Malicious Code",
"cweId": "CWE-506",
"description": "The product contains code that appears to be malicious in nature."
},
{
"name": "Embedded Malicious Code",
"cweId": "CWE-506",
"description": "The product contains code that appears to be malicious in nature."
},
{
"name": "Embedded Malicious Code",
"cweId": "CWE-506",
"description": "The product contains code that appears to be malicious in nature."
},
{
"name": "Embedded Malicious Code",
"cweId": "CWE-506",
"description": "The product contains code that appears to be malicious in nature."
},
{
"name": "Embedded Malicious Code",
"cweId": "CWE-506",
"description": "The product contains code that appears to be malicious in nature."
},
{
"name": "Embedded Malicious Code",
"cweId": "CWE-506",
"description": "The product contains code that appears to be malicious in nature."
},
{
"name": "Embedded Malicious Code",
"cweId": "CWE-506",
"description": "The product contains code that appears to be malicious in nature."
},
{
"name": "Embedded Malicious Code",
"cweId": "CWE-506",
"description": "The product contains code that appears to be malicious in nature."
}
],
"source": "https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/friendly-greeting-tools/MAL-2026-17416.json",
"indicators": {
"evidence_files": [
{
"path": "src/friendly_greeting/main.py",
"tlsh": "d6814b79d412cfd1a396097e5c4837cc5b39380b1984d07439ec56943faa879cef2684",
"sha256": "7d6806ac624a20670848cf3a54d12c92afb33b6092fe12adadf00e275e803dcf"
}
],
"package_integrity": [
{
"hashes": {
"md5": "94e4a280c272d10e9f4a4d18f92d02c2",
"sha256": "4ae86a864ce153d94ccc8e9fef6b39e8ba828a8e2b6ccddf286a4dc51b9a0665",
"blake2b_256": "8833af1b6313f43675f6ac9e7b867ddc52bf283a30366e458b8265caa63c731a"
},
"filename": "friendly_greeting_tools-0.3.2-py3-none-any.whl"
},
{
"hashes": {
"md5": "7af579f9836351ccbb1a069adeb5b0de",
"sha256": "4e0c64771cff787f0fe4fe05c31e78d18372c80909a17693ec60f923367bafc3",
"blake2b_256": "dc7d629f96ad1f5d5c07bd562a614991d58bf09435a5568733b89c818d075814"
},
"filename": "friendly_greeting_tools-0.3.2.tar.gz"
}
]
}
}
}
]Publisher severity
No explicit severity was provided.
- Event
- #59310 · Revision 1
- Added to Heist Feed
- Publisher date