aichannel

{"schema_version":"1.7.4","id":"MAL-2026-11415","published":"2026-07-31T14:12:28Z","modified":"2026-08-04T21:35:15.281716525Z","summary":"Malicious code in aichannel (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (7e51fdc38d5678b9b9a96014b69db1062b6ecc71b8986a837b4e9ba8d03d7214)\nPackage connects to a hardcoded C2 socket server (SOCKET_SERVER_HOST/SOCKET_SERVER_PORT from cognikit.config) and runs a typed-message session loop that gives the remote peer full control of the installer's host. handlers.handle_command base64-decodes attacker-supplied strings and passes them to subprocess.run(..., shell=True) via command.execute_command, yielding arbitrary shell RCE. The session dispatch also implements download (write attacker files to disk), upload/archive (exfiltrate arbitrary files or zipped directories to the C2), install/grabext (install or steal browser extensions), and keylog (upload keylogger output). launcher.run_helper spawns a background daemon that keystrokes and monitors the clipboard, swapping crypto wallet addresses with attacker-supplied replacements fetched from {DJANGO_API_URL}/address and decoded via base64 + XOR with the static key 'w3x'; the keylog file is later uploaded via upload_file_to_public_api(kl.log_path, machine_id, 'key'). The obfuscated wallet-replacement list and the clipper/keylogger integration confirm hostile intent.\n\n## Source: kam193 (21e18e6e4016bf07f11edb272a08fb26268b2fbfe0b42a4ba502df368ce05b01)\nIn this campaign, some packages (e.g. cognikit, aiassistcore) are pulled as dependencies and contain the C2 configuration and the malicious functionality, while others (like aichannel) provide fake functionality and silently execute malicious actions from dependencies. The malicious functionality is oriented to replace the copied cryptocurrency wallet addresses with these controlled by the attacker and downloaded from the C2 server, exfiltrating browser data, establishing a remote control over the device, placing malicious extensions in browsers. \n\nIoCs are consistent with those previously attributed to North Korea's \"Contagious Interview\" campaign. The known TTP suggest these packages are used as dependencies in malicious interview assessments or cryptocurrency projects.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-07-cognikit\n\n\nReasons (based on the campaign):\n\n\n - crypto-related\n\n\n - The malicious code is intentionally included in a dependency of the package\n\n\n - keylogger\n\n\n - clipboard-modify\n\n\n - exfiltration-browser-data\n\n\n - persistence\n\n\n - rat\n\n\n - The package contains code to execute remote commands (probably limited to a specific set) on the victim's machine.\n","affected":[{"package":{"name":"aichannel","ecosystem":"PyPI"},"versions":["0.1.2"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"aichannel/handlers.py","sha256":"e3930bc5d60d6b9749b403922a9d929b6a8452a9d4e05cb42ef115927757ab44","tlsh":"50a1dd02ac1c5c5ac1a3d29ab52174c1d56aa7c74a043c33b7dc46789f6ccb2a2f338e"},{"path":"aichannel/session.py","sha256":"1367ad6d7945f72034e38657309b2a6bef0020904fb4c82f97d7e6d88b641013","tlsh":"e091c0516c0d2859c2e3d8267561e041cb136687910c2ef7b6ec83b51fb85b5b9e23fd"},{"path":"aichannel/launcher.py","sha256":"10beca595d25588bbd15c05eaf857c22e03d16065b03714353fccb8e1fd96a92","tlsh":"8231484638d525b1c187a4440439d253663b3c5b5b0c9c39fb9cc3232f88131c8f98ad"}],"package_integrity":[{"filename":"aichannel-0.1.2-py3-none-any.whl","hashes":{"blake2b_256":"4941f57231bcde80d044ff05bf63e7fca7a843b2ce0e652e78607b411e1e6636","md5":"29d286f084e84f9afd30e2800ce4cef1","sha256":"c2df8237fb5cefd654d919acf0792efd0a30fb69a37a78bd9af1c6b75f0dc944"}}]}}}],"references":[{"type":"WEB","url":"https://x.com/L0Psec/status/2066540845893861386"},{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/aichannel"},{"type":"PACKAGE","url":"https://pypi.org/project/aichannel/0.1.2/"}],"database_specific":{"iocs":{"ips":["45.95.186.237"],"urls":["http://45.95.186.237:8000/address"]},"malicious-packages-origins":[{"id":"pypi/2026-07-cognikit/aichannel","import_time":"2026-07-31T15:20:37.163015694Z","modified_time":"2026-07-31T14:12:28.792739Z","sha256":"21e18e6e4016bf07f11edb272a08fb26268b2fbfe0b42a4ba502df368ce05b01","source":"kam193","versions":["0.1.2"]},{"id":"IN-MAL-2026-010989","import_time":"2026-08-04T21:33:12.599670854Z","modified_time":"2026-08-04T21:16:10Z","sha256":"7e51fdc38d5678b9b9a96014b69db1062b6ecc71b8986a837b4e9ba8d03d7214","source":"amazon-inspector","versions":["0.1.2"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}