nvtorch-oot-nightly

{"schema_version":"1.7.4","id":"MAL-2026-11425","published":"2026-08-01T10:58:03Z","modified":"2026-08-04T22:32:07.944691592Z","summary":"Malicious code in nvtorch-oot-nightly (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (d92503f2178663997d57ffa45fbb89f4a55de70e94f66745b4edf283a98e830f)\nThe package's setup.py issues an install-time HTTP request to the hardcoded bare-IP URL http://167.233.212.138/cb/db27bcff144c059f/nvtorch_oot_nightly using urlopen with a 5-second timeout. The request fires automatically on `pip install`, notifying the operator of the remote endpoint that the package was installed and leaking the installer's source IP and network metadata over plain HTTP. The package name (`nvtorch-oot-nightly`) and version (`99999.0.1`) shadow a plausible internal NVIDIA/PyTorch namespace with a high version to win resolution against an internal index — the canonical dependency-confusion shape. The path component `cb/db27bcff144c059f/nvtorch_oot_nightly` encodes a per-target identifier used to correlate installs back to the specific victim organization.\n\n## Source: kam193 (0f81b904b849df393cbe5c34f952af65d8b28e0797e33d62cf964df77d4929c7)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n","affected":[{"package":{"name":"nvtorch-oot-nightly","ecosystem":"PyPI"},"versions":["99999.0.0","99999.0.1"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"setup.py","sha256":"559b1edc4d5f10afe77e7bc7f055182bcb18921ccb15a6a4875763e1edbf33d8","tlsh":"35e0684fce12b8698c91aadf04bd55272279e1231b69d4e6b7d8c3a52bcf43dfb12101"}],"package_integrity":[{"filename":"nvtorch_oot_nightly-99999.0.1.tar.gz","hashes":{"blake2b_256":"11c45c6659f731f7aad0cb7b7835412cac718a5027eb6d67f45d72962955e651","md5":"ba407760b6248ce5cd5ceceb5e92d941","sha256":"edff8e4841328ca707f88bff729e04319b470321b2fbfdef633dd0535b85e8de"}}]}}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/nvtorch-oot-nightly"},{"type":"PACKAGE","url":"https://pypi.org/project/nvtorch-oot-nightly/99999.0.0/"},{"type":"PACKAGE","url":"https://pypi.org/project/nvtorch-oot-nightly/99999.0.1/"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/GENERIC-standard-pypi-install-pentest/nvtorch-oot-nightly","import_time":"2026-08-01T11:53:26.776398998Z","modified_time":"2026-08-01T10:58:03.998951Z","sha256":"0f81b904b849df393cbe5c34f952af65d8b28e0797e33d62cf964df77d4929c7","source":"kam193","versions":["99999.0.0","99999.0.1"]},{"id":"IN-MAL-2026-011258","import_time":"2026-08-04T22:30:07.789325087Z","modified_time":"2026-08-04T21:55:18Z","sha256":"64d0b909171c36fd0e36f975f61e1cd64fe90036b669987ba5b64393d72bda10","source":"amazon-inspector","versions":["99999.0.0"]},{"id":"IN-MAL-2026-011239","import_time":"2026-08-04T22:30:06.691248384Z","modified_time":"2026-08-04T21:52:25Z","sha256":"d92503f2178663997d57ffa45fbb89f4a55de70e94f66745b4edf283a98e830f","source":"amazon-inspector","versions":["99999.0.1"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}