vercel-runtime-python

{"schema_version":"1.7.4","id":"MAL-2026-17168","published":"2026-09-24T23:23:58Z","modified":"2026-09-25T02:47:22.055536997Z","summary":"Malicious code in vercel-runtime-python (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (f59b48451cf996ea42b291d60ed56205aeb9803222d156f7880fd6b92032b1c6)\nThe package presents itself as a Vercel Python runtime helper but ships no runtime functionality. Its only substantive code path is a public function send_info() that gathers hostname, resolved IP, operating system, and machine architecture via get_device_info() and POSTs the result as JSON to the hardcoded URL https://webhook.site/f9bff304-3053-4d54-be05-86537267514a. The destination is not caller-configurable, is not documented, and is not associated with Vercel. Any consumer that invokes the advertised API silently discloses host reconnaissance data to an attacker-controlled webhook.site inbox. The typosquat-shaped name (mimicking an official Vercel component) combined with a module surface consisting solely of host-info collection and outbound POST is consistent with reconnaissance-oriented installer targeting rather than a legitimate runtime library.\n\n## Source: kam193 (5bd13c006fe4fbaf8bb81d068f6e3c822ea1e664b24d0045370aead862ccd06f)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n","affected":[{"package":{"name":"vercel-runtime-python","ecosystem":"PyPI"},"versions":["0.1.0","99.99.99","100.99.99","100.100.99"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"vercel_runtime_python/index.py","sha256":"6ab7560e4ef68504634461bbda88421e0bd94e3c56cea3e30d5f18fb8e880cb2","tlsh":"c411c0269d92c941873540cc8c4295c6f716972b6f65ad2bfefc43596f3101093b057e"}],"package_integrity":[{"filename":"vercel_runtime_python-99.99.99-py3-none-any.whl","hashes":{"blake2b_256":"f68457e7658730b82b7f16d7a841b7d8640076739bc95a6470da070ca37a83e6","md5":"e8ee8e82b7760ce500f5674defdccd7d","sha256":"1a6e94ac49be7e10b520710d59b3228f0ccc40a5ca878fcf5eb29f19e594d381"}},{"filename":"vercel_runtime_python-99.99.99.tar.gz","hashes":{"blake2b_256":"c3d8a0d54583e12843375ff18bd189ffda447c4234da1dde58b4056d439c11d0","md5":"93ce406beedde0f1dc4ede371be2e05c","sha256":"57b02e59ebf7163697735dbe9fc302b3239c04b4aa4f78bb8fcf09b577b90ea7"}}]}}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/vercel-runtime-python"},{"type":"PACKAGE","url":"https://pypi.org/project/vercel-runtime-python/99.99.99/"},{"type":"PACKAGE","url":"https://pypi.org/project/vercel-runtime-python/0.1.0/"},{"type":"PACKAGE","url":"https://pypi.org/project/vercel-runtime-python/100.99.99/"},{"type":"PACKAGE","url":"https://pypi.org/project/vercel-runtime-python/100.100.99/"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/GENERIC-standard-pypi-install-pentest/vercel-runtime-python","import_time":"2026-09-24T23:38:09.361576484Z","modified_time":"2026-09-24T23:23:58.137607Z","sha256":"5bd13c006fe4fbaf8bb81d068f6e3c822ea1e664b24d0045370aead862ccd06f","source":"kam193","versions":["0.1.0","99.99.99","100.99.99","100.100.99"]},{"id":"IN-MAL-2026-020554","import_time":"2026-09-25T02:45:29.19721983Z","modified_time":"2026-09-25T02:42:16Z","sha256":"8baaac3afcab2fdb8d268149c8ac31706f823b80e1856790330f30236de69678","source":"amazon-inspector","versions":["99.99.99"]},{"id":"IN-MAL-2026-020552","import_time":"2026-09-25T02:45:29.139317999Z","modified_time":"2026-09-25T02:41:59Z","sha256":"f59b48451cf996ea42b291d60ed56205aeb9803222d156f7880fd6b92032b1c6","source":"amazon-inspector","versions":["0.1.0"]},{"id":"IN-MAL-2026-020549","import_time":"2026-09-25T02:45:29.0587284Z","modified_time":"2026-09-25T02:41:33Z","sha256":"4cc49f07c3e7479da82db0a24f0580167564acd727f34853e1d698f7dc71b65e","source":"amazon-inspector","versions":["100.99.99"]},{"id":"IN-MAL-2026-020546","import_time":"2026-09-25T02:45:28.971694083Z","modified_time":"2026-09-25T02:41:06Z","sha256":"860cd14ddffeffe03e86385355e6b60ec25cf8cd8bc688bfb16b233ad89097c9","source":"amazon-inspector","versions":["100.100.99"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}