Skip to content
Heist/ feed
Unrated

Malicious code in aseitylab (PyPI)

Type: advisorySource: OSV1 source record

--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (9b47f0f7a0776cad3d4c83604d35a0023a250d2f035e58129233095aa2b110a3) aseitylab/_shimdata.py contains a large base85-encoded, zlib-compressed blob stored as DATA. aseitylab/compat.py defines _ensure_compat(), which base85-decodes and zlib-inflates DATA and passes the result to exec(compile(..., '', 'exec')). setup.py imports aseitylab.compat and invokes _ensure_compat() during package build/install, and aseitylab/__init__.py calls the same function on every import, so the decoded payload runs both when the package is installed and whenever it is imported. Execution is gated by environment variables (ASEITYLAB_COMPAT=0, DAS_STAGED=1) that allow the payload to be suppressed in build or test environments. The README advertises a pure-Python task-orchestration toolkit with no runtime dependencies, which does not require a compressed, encoded executable blob shipped as 'compatibility shim data'. MANIFEST.in additionally excludes file names (loader_payload.py, make_armed.py, armed.json, manifest.benign.json) consistent with a build harness that produces separate 'armed' and 'benign' tarballs. The contents of the executed payload are not inspectable from the shipped source; installing or importing the package hands arbitrary code execution to whatever DATA decodes to. ## Source: kam193 (24b99c2059065cbe44f7dac2f1d2878b237c58150c0890baa1856852e76fcb24) During installation, obfuscated code is used to

Announced Source revision 1
Original source ↗

MAL-2026-17240

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-17240

aseitylab

Source reference: /affected/0/package/name

Affected versions
0.1.0

Source reference: /affected/0/versions

0.1.1

Source reference: /affected/0/versions

Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "package": {
      "name": "aseitylab",
      "purl": "pkg:pypi/aseitylab",
      "ecosystem": "PyPI"
    },
    "versions": [
      "0.1.0",
      "0.1.1"
    ],
    "database_specific": {
      "cwes": [
        {
          "name": "Embedded Malicious Code",
          "cweId": "CWE-506",
          "description": "The product contains code that appears to be malicious in nature."
        }
      ],
      "source": "https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/aseitylab/MAL-2026-17240.json",
      "indicators": {
        "evidence_files": [
          {
            "path": "aseitylab/compat.py",
            "tlsh": "e6019c606d4d1cb2e230b06e8964e4bcc26d5b07be266006bd8c47bc2f30f51d2e28dc",
            "sha256": "67a8e98c2d83e13097bf6138c7ca7bc388830df888ec12bc56438859e7adb20b"
          },
          {
            "path": "aseitylab/_shimdata.py",
            "tlsh": "ad31fab54d504edae1ac134423302cfeed221e3d4be69675f9d048d2166e0548550aff",
            "sha256": "aad65af02297f9594503919fb08845ade61092e9116f314c813ced6d9ca266a2"
          },
          {
            "path": "MANIFEST.in",
            "tlsh": "7fc02230865cb056820d04ea2e609e14a19a2e073aa36313c6090cedec0b5c8d0176aa",
            "sha256": "9f2f4b9007fbab4bf4176ae67d7b3787493575da533a3e0d35a0f6e045ee9c32"
          }
        ]
      }
    }
  }
]

Publisher severity

No explicit severity was provided.

Event
#24118 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement