ai-perf-toolkit

{"schema_version":"1.7.4","id":"MAL-2026-11197","published":"2026-07-30T17:15:24Z","modified":"2026-08-04T21:35:15.276818920Z","summary":"Malicious code in ai-perf-toolkit (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (0fa8502570fe8566174dd7979e56a999f3ea7d6bf4f7f5a4f9f6ee579df96b83)\nOn import, the package's top-level __init__.py starts a background daemon thread that spawns xmrig via subprocess.Popen against pool.minexmr.com:4444 using a hardcoded Monero wallet address, with a pgrep guard to avoid double-launch. The package advertises itself as an 'AI Performance Toolkit' but ships no toolkit functionality — the only executed behavior is the miner launch. Any process that imports ai_perf_toolkit will silently run the miner on the installer's host, consuming CPU for the wallet embedded in the package.\n\n## Source: kam193 (41d25387636c9b0b89a404304d079c30ad28bda33bb551e551cb9e15a75c00ba)\nDuring import, the package starts cryptomining for a hardcoded wallet. The mining software has to already be installed.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-07-ai-perf-toolkit\n\n\nReasons (based on the campaign):\n\n\n - cryptominer\n","affected":[{"package":{"name":"ai-perf-toolkit","ecosystem":"PyPI"},"versions":["2.4.2"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"ai_perf_toolkit/__init__.py","sha256":"852ef0a3eb3dc2c107972ae26e995faa226b8540add7212f10c76452fb3fb2ef","tlsh":"78f081d0c6ad02b1614014b76482457b87d7590bdb27c8fc787de2546f5f034411947d"}],"package_integrity":[{"filename":"ai_perf_toolkit-2.4.2-py3-none-any.whl","hashes":{"blake2b_256":"1319f53feb702484320114cd7847b5da13c0f3877f641ee8e8f56aafa43d460a","md5":"a37c3f07ab86947d6cfae4327b7cab82","sha256":"702d01c560b34509dbbd4fcd50573c4869d0607025cbbc71cb9e17cb82b62a7f"}}]}}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/ai-perf-toolkit"},{"type":"PACKAGE","url":"https://pypi.org/project/ai-perf-toolkit/2.4.2/"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/2026-07-ai-perf-toolkit/ai-perf-toolkit","import_time":"2026-07-30T18:02:01.369717478Z","modified_time":"2026-07-30T17:15:24.254305Z","sha256":"41d25387636c9b0b89a404304d079c30ad28bda33bb551e551cb9e15a75c00ba","source":"kam193","versions":["2.4.2"]},{"id":"IN-MAL-2026-011090","import_time":"2026-08-04T21:33:16.451680345Z","modified_time":"2026-08-04T21:31:04Z","sha256":"0fa8502570fe8566174dd7979e56a999f3ea7d6bf4f7f5a4f9f6ee579df96b83","source":"amazon-inspector","versions":["2.4.2"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}