cubesat-upstream-driver

{"schema_version":"1.7.4","id":"MAL-2026-13666","published":"2026-08-09T13:09:20Z","modified":"2026-08-10T11:53:52.209695281Z","summary":"Malicious code in cubesat-upstream-driver (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (1f5f2cf32e29ec0daedda5112ca2c560e69b4c4cd77850d6dc52d7a448e343a2)\nThe package is advertised as an 'Upstream driver interface for cubesat orbital command bus' but ships no driver, protocol, or telemetry code. Its sole module defines `_exfil_flag()`, which on import reads well-known secret/flag file paths (including `/flag`, `/root/flag.txt`, and `/**/flag*` globs), scans `os.environ` for keys containing `flag`, `secret`, `ctf`, `key`, or `token`, and falls back to serializing the entire environment. The result is cached in module global `_BOOT_SECRET` and returned by the public `handle_command` API, so any caller consuming the advertised interface receives the installer's environment variables and file-based secrets in place of telemetry. `handle_command` also re-runs the harvest on each invocation.\n\n## Source: kam193 (d669fdf7584f17d952cec3ed432bdb8f07672b43c3bc42ae68aa2d042d51481b)\nPackage appears to abuse PyPI for a CTF-like exercise. It can collect up to all environment variables. The package does not exfiltrate them on its own, suggesting there is another external trigger for that.\n\nOriginally detected by Aikido.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: 2026-08-cubesat-upstream-driver\n\n\nReasons (based on the campaign):\n\n\n - dependency-confusion\n\n\n - other\n","affected":[{"package":{"name":"cubesat-upstream-driver","ecosystem":"PyPI"},"versions":["1.0.1"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"cubesat_upstream_driver/__init__.py","sha256":"9b267c1b94f311314cce2df208b59fb8030d3129376a10f52966d6f67302a789","tlsh":"7831fec1bb693c53e0d25128953ac1052b2efd473a45207abacc53622f6c1acccb9689"},{"path":"pyproject.toml","sha256":"c00189e7d418e6fd090733cb85dc1b0c42ffc73edea24e08a3dbe147faf9f3ee","tlsh":"c3f02d1bc9d65c279581608260020a01bef0942b1bc9c00e23efc009ebae8cac2fe828"}],"package_integrity":[{"filename":"cubesat_upstream_driver-1.0.1-py3-none-any.whl","hashes":{"blake2b_256":"3e894cfbbe93af11314f9ad2770da09844de83764b36e24957de07363edae3d5","md5":"8ff8584dd9385b84c682606ced403bc3","sha256":"1f90912d5cb8104ef518cd16a3de1b303f7b871a5b8a4096185595b54600e8f4"}},{"filename":"cubesat_upstream_driver-1.0.1.tar.gz","hashes":{"blake2b_256":"eb552d8df86746f5e01d0e939e35e8bd4f75138977ed9ec8ce3a5c6fdd7b2690","md5":"9ef7881f15529d3ee8fe774d80071bfa","sha256":"9fc77502c2bb533baf48b3b7adbbd9c33f7c61105bf84d7145bfa817af98059c"}}]}}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/cubesat-upstream-driver"},{"type":"PACKAGE","url":"https://pypi.org/project/cubesat-upstream-driver/1.0.1/"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/2026-08-cubesat-upstream-driver/cubesat-upstream-driver","import_time":"2026-08-09T13:50:51.214656911Z","modified_time":"2026-08-09T13:09:20.505024Z","sha256":"d669fdf7584f17d952cec3ed432bdb8f07672b43c3bc42ae68aa2d042d51481b","source":"kam193","versions":["1.0.1"]},{"id":"IN-MAL-2026-017205","import_time":"2026-08-10T11:51:54.663616204Z","modified_time":"2026-08-10T11:49:31Z","sha256":"1f5f2cf32e29ec0daedda5112ca2c560e69b4c4cd77850d6dc52d7a448e343a2","source":"amazon-inspector","versions":["1.0.1"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}