metrio

{"schema_version":"1.7.4","id":"MAL-2026-17193","published":"2026-09-27T07:06:20Z","modified":"2026-09-30T01:39:03.000303818Z","summary":"Malicious code in metrio (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (ce8ee66a844d7abed74f4b9d223c8ef8f35bae380104526f4f8bc57295c47320)\nmetrio 999.0.0 executes a hostname-exfiltration beacon from both setup.py (install time) and metrio/__init__.py (import time). The code reads the local machine's hostname, hex-encodes it, and embeds it as a subdomain of the attacker-controlled domain 84avt3516s4q1obsv9q0mh4u2l8dw3ks.x9.to, then triggers a DNS resolution via socket.gethostbyname and a plain-HTTP GET via urllib.request.urlopen against that host. The version number 999.0.0 and the self-described 'dependency-confusion PoC placeholder' summary are the canonical high-version dependency-confusion shape: the package is intended to win resolution against an internal package of the same name and beacon the resolving host back to the operator. Installer harm on `pip install metrio` or `import metrio` is disclosure of the installer's hostname to a third-party collector, and confirmation to the operator that this internal name resolves to the public index from the installer's build environment.\n\n## Source: kam193 (f7b0289ef68f815e0fd296282739990dfc918c0070fb5acdae2787ca8eba23f3)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n","affected":[{"package":{"name":"metrio","ecosystem":"PyPI"},"versions":["999.0.0","1000.0.0","1001.0.0"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"metrio/__init__.py","sha256":"66b1b2912b7fa19bb87f3ba31543ae67f8233c5e108114c912307f352d8ee7b0","tlsh":"98e02bd3902139d3e5cb9505c4789e3477a3bd4ff0438831758d53482fe9875906151e"},{"path":"setup.py","sha256":"566ec6a8684710ef93f190198b1b84fa50bbb9b07e1e6587f66cbcb8e487f6f5","tlsh":"c0d022099802ae3584a041dcce2240177a74d0224f18f696300ca29c275ea9a8bf5289"}],"package_integrity":[{"filename":"metrio-1001.0.0.tar.gz","hashes":{"blake2b_256":"e5a1d24b70435cd5d74f93e7b78128039516e26300bd388837995c5b86c10cee","md5":"5c42063387840a615d70b90111b758ee","sha256":"b357ae567113329527f3eb3aab73a643cf4782de1b382f11a0a5ccfd58125b00"}}]}}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/metrio"},{"type":"PACKAGE","url":"https://pypi.org/project/metrio/1000.0.0/"},{"type":"PACKAGE","url":"https://pypi.org/project/metrio/999.0.0/"},{"type":"PACKAGE","url":"https://pypi.org/project/metrio/1001.0.0/"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/GENERIC-standard-pypi-install-pentest/metrio","import_time":"2026-09-27T07:20:13.937865275Z","modified_time":"2026-09-27T07:06:20.021767Z","sha256":"f7b0289ef68f815e0fd296282739990dfc918c0070fb5acdae2787ca8eba23f3","source":"kam193","versions":["999.0.0","1000.0.0","1001.0.0"]},{"id":"IN-MAL-2026-020580","import_time":"2026-09-28T15:19:57.437021442Z","modified_time":"2026-09-28T15:05:16Z","sha256":"aa43e5bd4e94fcbdb47833ee74344b59f44bb3eb475e656855bae538c9716fcf","source":"amazon-inspector","versions":["1000.0.0"]},{"id":"IN-MAL-2026-020583","import_time":"2026-09-28T18:24:37.843334463Z","modified_time":"2026-09-28T17:58:32Z","sha256":"ce8ee66a844d7abed74f4b9d223c8ef8f35bae380104526f4f8bc57295c47320","source":"amazon-inspector","versions":["999.0.0"]},{"id":"IN-MAL-2026-020776","import_time":"2026-09-30T01:36:50.722015489Z","modified_time":"2026-09-30T01:10:42Z","sha256":"76ff4203d226c3aec8320c217397a99e823f7d46eb85b79bdd872a97b0dab688","source":"amazon-inspector","versions":["1001.0.0"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}