Malicious code in lore-cs (PyPI)

{
  "id": "e474719c2ccd467a18718589c5031f28eef6a986144c801dfe140b3abacddde5",
  "url": "https://osv.dev/vulnerability/MAL-2026-17639",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "Malicious code in lore-cs (PyPI)",
    "summary": "--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (f84e496d81c3e514ec784db2d5996a9015fa9f01f50cb75a99011eb348b2aa07) lore-cs 1.0.0 executes an outbound HTTP POST both from setup.py (at install time) and from lore_cs/__init__.py (at import time) to the hardcoded bare-IP endpoint http://185.158.107.175:8787/_ah/dc over plaintext HTTP. The payload includes the installer's hostname, install path, current working directory, and package name. The import-time beacon fires on every import, so the behavior also triggers in environments where pip build isolation would otherwise contain setup.py side effects. The destination is a hardcoded author-controlled bare IP not configured by the installer, and the package self-labels as a dependency-confusion canary while performing unauthenticated host-identifier collection against anyone who installs or imports it. ## Source: kam193 (ae8b741b7c90400c3a5f4ba13533b1a6a75134f768934834b591c8df23eecb83) During installation or import, the package exfiltrates basic information in a dependency confusion attempt. The user identifies themselves as a HackerOne user abusing the PyPI for the purpose of a bug bounty program. --- Category: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities. Campaign: GENERIC-hackerone-bugbounty Reasons (based on the campaign): - The package contains c",
    "evidence": "osv:MAL-2026-17639",
    "products": [
      {
        "name": {
          "value": "lore-cs",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": [
          {
            "value": "1.0.0",
            "evidence": "/affected/0/versions"
          }
        ]
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "MAL-2026-17639",
      "aliases": [
        "MAL-2026-17639"
      ],
      "affected": [
        {
          "package": {
            "name": "lore-cs",
            "purl": "pkg:pypi/lore-cs",
            "ecosystem": "PyPI"
          },
          "versions": [
            "1.0.0"
          ],
          "database_specific": {
            "cwes": [
              {
                "name": "Embedded Malicious Code",
                "cweId": "CWE-506",
                "description": "The product contains code that appears to be malicious in nature."
              }
            ],
            "source": "https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/lore-cs/MAL-2026-17639.json",
            "indicators": {
              "evidence_files": [
                {
                  "path": "setup.py",
                  "tlsh": "fc4187d1cc212da441d7f2e48d256899332dba93bf02685839dc428d1f0f5fd91b2a65",
                  "sha256": "65d3409ebd3e5b92933897f7b847a38a1e05439863ed4d4679c9d29aaa0d05a7"
                },
                {
                  "path": "lore_cs/__init__.py",
                  "tlsh": "292166c0c92009912183a3d0953f6976a33471e3bf635c513e8c96dc0f0e86b84f3da4",
                  "sha256": "5ed355735922de2fee3046a66958d715b3d8eece77bf79bfb397727c06e04716"
                }
              ],
              "package_integrity": [
                {
                  "hashes": {
                    "md5": "e4f4f9356413f3aec9870ad6b6259ca4",
                    "sha256": "d071c62082afc6237992adf9265c3dfcb858c119a77011baeea879b0c34e48bd",
                    "blake2b_256": "f23326bcb5c55c1298a456d0cb043007bede4833a70bc2fa2e6ba022e07d967d"
                  },
                  "filename": "lore_cs-1.0.0-py3-none-any.whl"
                },
                {
                  "hashes": {
                    "md5": "64f98005e339f384fe57b056b511f363",
                    "sha256": "37c7268ec40ad049c854f0190ca71ca97c4216d5d9c352f556b7f5bd49fde2ce",
                    "blake2b_256": "93821c698a9c361cc8859f13d7dd62cd89b586b6e862e94845aff870541b51b0"
                  },
                  "filename": "lore_cs-1.0.0.tar.gz"
                }
              ]
            }
          }
        }
      ],
      "modified": "2026-10-08T04:00:04.341459893Z",
      "provider": "osv",
      "references": [
        "https://bad-packages.kam193.eu/pypi/package/lore-cs",
        "https://pypi.org/project/lore-cs/1.0.0/"
      ],
      "provider_metadata": {
        "malicious-packages-origins": [
          {
            "id": "pypi/GENERIC-hackerone-bugbounty/lore-cs",
            "sha256": "ae8b741b7c90400c3a5f4ba13533b1a6a75134f768934834b591c8df23eecb83",
            "source": "kam193",
            "versions": [
              "1.0.0"
            ],
            "import_time": "2026-10-06T21:41:45.414022856Z",
            "modified_time": "2026-10-06T21:13:57.624724Z"
          },
          {
            "id": "IN-MAL-2026-021129",
            "sha256": "f84e496d81c3e514ec784db2d5996a9015fa9f01f50cb75a99011eb348b2aa07",
            "source": "amazon-inspector",
            "versions": [
              "1.0.0"
            ],
            "import_time": "2026-10-08T03:50:29.849075864Z",
            "modified_time": "2026-10-08T03:40:16Z"
          }
        ]
      }
    },
    "related_cves": [],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 98431,
  "published_at": "2026-10-06T21:13:57+00:00"
}