kimichat

{"schema_version":"1.7.4","id":"MAL-2026-10864","published":"2026-07-20T05:07:32Z","modified":"2026-08-04T22:32:07.883778555Z","summary":"Malicious code in kimichat (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (b57c88bce76fccb6cb2b3a99ef53a62402a8d56b4918ba4c7f2b634036317093)\nThe package presents itself as a 'Python wrapper for the bundled kimichat runtime' and exposes a `kimichat-run` console script plus `kimichat.run()`. Invoking either causes `kimichat.core.run()` to spawn `bash` on the bundled `src/kimichat/resources/start.sh`, which chmod+x's and executes a ~32MB bundled Linux ELF at `src/kimichat/resources/kimichat`. String analysis of the ELF identifies it as 'ForgeMiner/1.4.1', a stratum GPU miner with CUDA kernels for kawpow/xelis/kryptix/alpha/keryx and standard stratum verbs (`mining.authorize`, `mining.subscribe`). `start.sh` hardcodes the mining destination and wallet: `FORGE_WALLET=\"prl1p2jan4dvkdfkt5r3pra7z96axrxjyjcgat9w7ldetlcy9wffm569sc9ux2t\"` and `POOL=\"45.151.62.119:3361\"`. Running the tool consumes the host's GPU and electricity and routes the mined rewards to the hardcoded author wallet; the delivered binary does not match the package's advertised purpose as a chat runtime.\n\n## Source: kam193 (1d4795d0466af3e087dba2ac688463000092f9f4fda9040a4653956a3dc2583a)\nIn this campaign, packages use names similar to popular services (e.g. Kimi AI) to deploy cryptominer.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-07-kimichat\n\n\nReasons (based on the campaign):\n\n\n - cryptominer\n","affected":[{"package":{"name":"kimichat","ecosystem":"PyPI"},"versions":["0.1.0","0.1.1"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"src/kimichat/resources/start.sh","sha256":"7ba655eb6b7d981c901657be694411305612b5f404eb3734798d5ac10f7ce948","tlsh":"223142c36e040631551eb7286906b9ca5e5830775a8b36a9b7cd77b1a30fba84522cf2"},{"path":"pyproject.toml","sha256":"7c8aa199409634dc910bf069966bdc19b1a8bee3e0423781af094b31ff36371a","tlsh":"4af08b23cf77ad6099d211050028c081eb916414269260fca6c7d26800dd1dbc6dcc3a"}],"package_integrity":[{"filename":"kimichat-0.1.0-py3-none-any.whl","hashes":{"blake2b_256":"409ede1c605aa538d0144d6733dd501268158210414d6b25f8d2781deafc2645","md5":"ba4eaea8d0e795ba53123d8b701f810b","sha256":"72e7041783382deda84c968c2abbc7b77a94aef9b4b69c1815c22610b6c8eb54"}},{"filename":"kimichat-0.1.0.tar.gz","hashes":{"blake2b_256":"8a8a0236013fb93b4be8fb9cda95ae08e0bd3b7bf278fdfd8a41c97b3c793851","md5":"951f6a4ff49b6c2313c63014afa976ea","sha256":"8d1539eec1fcd4efe71b289639a3588a3d391a930de16710986e8ed602c4dde1"}}]}}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/kimichat"},{"type":"WEB","url":"https://github.com/newbroughblueogwin/automatic-octo-invention"},{"type":"PACKAGE","url":"https://pypi.org/project/kimichat/0.1.0/"},{"type":"PACKAGE","url":"https://pypi.org/project/kimichat/0.1.1/"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/2026-07-kimichat/kimichat","import_time":"2026-07-20T06:05:22.552899283Z","modified_time":"2026-07-20T05:07:33.120855Z","sha256":"1d4795d0466af3e087dba2ac688463000092f9f4fda9040a4653956a3dc2583a","source":"kam193","versions":["0.1.0","0.1.1"]},{"id":"pypi/2026-07-kimichat/kimichat","import_time":"2026-07-20T20:04:39.242923131Z","modified_time":"2026-07-20T05:07:33.120855Z","sha256":"dd54b31f9655bf3fdce1f88945d472f25a93b3da9ecc8b4370025842aa82689a","source":"kam193","versions":["0.1.0","0.1.1"]},{"id":"IN-MAL-2026-011104","import_time":"2026-08-04T22:29:59.519355151Z","modified_time":"2026-08-04T21:33:02Z","sha256":"59d3c008ba7e9dad4a57424b2ded5748db91362d8a7b5bb6b9d3e2bceefe262c","source":"amazon-inspector","versions":["0.1.0"]},{"id":"IN-MAL-2026-011105","import_time":"2026-08-04T22:29:59.577277902Z","modified_time":"2026-08-04T21:33:11Z","sha256":"b57c88bce76fccb6cb2b3a99ef53a62402a8d56b4918ba4c7f2b634036317093","source":"amazon-inspector","versions":["0.1.1"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}