kb-ai

{"schema_version":"1.7.4","id":"MAL-2026-14069","published":"2026-08-16T19:31:26Z","modified":"2026-08-18T21:44:02.595197192Z","summary":"Malicious code in kb-ai (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (3d69143a6cdc0a652f91210034751420f7ada3db2a13d81d9e635e3a63333dc5)\nOn `import kb_ai`, the package's `__init__.py` triggers `kb_ai.utils.callback`, which starts a background thread that collects installer host identifiers (hostname, platform, Python version, timestamp) and POSTs them to a hardcoded Azure-hosted endpoint at bybitpoc-f2b2b4gfbefufvfc.canadacentral-01.azurewebsites.net/callback. The network call is unconditional, fires without caller opt-in, and errors are silently swallowed. The module's own comments describe the behavior as a supply-chain proof-of-concept.\n\n## Source: kam193 (edd64785c168e513c50673e9b031048ba592c1460a9a952f9430feb83bf5042d)\nThe main purpose of the package is to demonstrate a dependency confusion attack. The rest of the functionality is just a stub.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n","affected":[{"package":{"name":"kb-ai","ecosystem":"PyPI"},"versions":["0.1.0","0.1.1"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"src/kb_ai/utils/callback.py","sha256":"c1b3725e4caca159d3982a1430bffb3f00d53b6657f2b2a2b4eb7ea91fffdf11","tlsh":"b221e245c5729b705a2287fad45b37603337f0477f06149eb99d4b680f0d16a0263177"}],"package_integrity":[{"filename":"kb_ai-0.1.1-py3-none-any.whl","hashes":{"blake2b_256":"e0893a597f15a48b82beac4ad047a6b106ac446d9907f9b4c710e6cbcf192edc","md5":"3b54cb2aa6c72126da86a3da8fb8317e","sha256":"fcc83b434dda755bdb4456d2af611fbcfbfc219fa99ac309370b7cb2889bb82c"}},{"filename":"kb_ai-0.1.1.tar.gz","hashes":{"blake2b_256":"36da58f5204a032c1d9b9cb8ea1d971a64eb7ded3ee76709155a57d73b835c36","md5":"e539fe10cf2b3235b9403a436460d7b4","sha256":"5fc504a94739e386ea8c91b865e308fd448f81551cf1219d7e9c87a074efc904"}}]}}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/kb-ai"},{"type":"PACKAGE","url":"https://pypi.org/project/kb-ai/0.1.1/"},{"type":"PACKAGE","url":"https://pypi.org/project/kb-ai/0.1.0/"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/GENERIC-standard-pypi-install-pentest/kb-ai","import_time":"2026-08-16T19:40:05.442990443Z","modified_time":"2026-08-16T19:31:26.223185Z","sha256":"edd64785c168e513c50673e9b031048ba592c1460a9a952f9430feb83bf5042d","source":"kam193","versions":["0.1.0","0.1.1"]},{"id":"IN-MAL-2026-017980","import_time":"2026-08-18T04:47:04.84755426Z","modified_time":"2026-08-18T04:41:19Z","sha256":"3d69143a6cdc0a652f91210034751420f7ada3db2a13d81d9e635e3a63333dc5","source":"amazon-inspector","versions":["0.1.1"]},{"id":"IN-MAL-2026-018152","import_time":"2026-08-18T21:42:06.872912904Z","modified_time":"2026-08-18T21:24:34Z","sha256":"b3202c490c691e2db6a7ffa9410f40b72f43290dded83a788e57cbec30f58d9d","source":"amazon-inspector","versions":["0.1.0"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}