dbt-sa-cli

{"schema_version":"1.7.4","id":"MAL-2026-15934","published":"2026-09-05T05:59:33Z","modified":"2026-09-06T14:39:58.714338225Z","summary":"Malicious code in dbt-sa-cli (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (9a3fc52d1baa65bd51dd9659641f0df237ea2a595358cd91b19fd8988ba3236a)\nsetup.py defines rce_poc() and invokes it at module top level, so the code runs unconditionally during `pip install dbt-sa-cli`. The function collects installer-side identifiers (hostname, USER/USERNAME, current working directory, home path) and sends them out-of-band via a DNS lookup to a subdomain of yokodnssmamqdchvjfyqyo8zaq3s90h8e.oast.fun and an HTTPS POST to https://yokodnssmamqdchvjfyqyo8zaq3s90h8e.oast.fun/dbt-sa-cli. The same install-time path drops a marker file at ~/.dbt-sa-cli-rce-poc in the installer's home directory, demonstrating arbitrary code execution during install. The package name resembles the dbt ecosystem, making this a typosquat lure. Regardless of any 'security research' framing, installing the package produces immediate installer-side data disclosure and code execution against an author-controlled OOB collector.\n\n## Source: kam193 (23702c2370cf8873f90f85f178de5d781c9244f91fe412c952fc3cca8e98f974)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n","affected":[{"package":{"name":"dbt-sa-cli","ecosystem":"PyPI"},"versions":["0.0.1"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"setup.py","sha256":"4507e8ad1d81f857f8f44224df1affc1215a7152aa271703f77d743fa5b111cb","tlsh":"6d31cea2cd610832f6c2a144083642583025fa43bf81a8753eac97cc5f8e47b92a41e9"}],"package_integrity":[{"filename":"dbt_sa_cli-0.0.1-py3-none-any.whl","hashes":{"blake2b_256":"2d31df788c0e87806eecbbd219acf6f625db8b5fcae239b1ce8ba30b0d8f7ae5","md5":"94c461fb168ab9b790c1cee7df799ddd","sha256":"216e814548ce715fa11664f7ed2f639df4e5510df2df309a404e1d3a877aece0"}},{"filename":"dbt_sa_cli-0.0.1.tar.gz","hashes":{"blake2b_256":"fcf1a3d1e7613f8874ef48be576214c6992d2f30bca888269208c15039049517","md5":"77091662b7eb79646cd8572cd4e637ec","sha256":"38b8d462df6c6e72dc987da4dae49bf17648beec3eb988ce3868ecb19a5cd5b0"}}]}}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/dbt-sa-cli"},{"type":"PACKAGE","url":"https://pypi.org/project/dbt-sa-cli/0.0.1/"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/GENERIC-standard-pypi-install-pentest/dbt-sa-cli","import_time":"2026-09-05T06:27:04.669723572Z","modified_time":"2026-09-05T05:59:33.180537Z","sha256":"23702c2370cf8873f90f85f178de5d781c9244f91fe412c952fc3cca8e98f974","source":"kam193","versions":["0.0.1"]},{"id":"IN-MAL-2026-019649","import_time":"2026-09-06T14:38:06.03921949Z","modified_time":"2026-09-06T14:28:43Z","sha256":"9a3fc52d1baa65bd51dd9659641f0df237ea2a595358cd91b19fd8988ba3236a","source":"amazon-inspector","versions":["0.0.1"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}