lore-cs

{"schema_version":"1.7.4","id":"MAL-2026-17639","published":"2026-10-06T21:13:57Z","modified":"2026-10-08T03:52:26.140790600Z","summary":"Malicious code in lore-cs (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (f84e496d81c3e514ec784db2d5996a9015fa9f01f50cb75a99011eb348b2aa07)\nlore-cs 1.0.0 executes an outbound HTTP POST both from setup.py (at install time) and from lore_cs/__init__.py (at import time) to the hardcoded bare-IP endpoint http://185.158.107.175:8787/_ah/dc over plaintext HTTP. The payload includes the installer's hostname, install path, current working directory, and package name. The import-time beacon fires on every import, so the behavior also triggers in environments where pip build isolation would otherwise contain setup.py side effects. The destination is a hardcoded author-controlled bare IP not configured by the installer, and the package self-labels as a dependency-confusion canary while performing unauthenticated host-identifier collection against anyone who installs or imports it.\n\n## Source: kam193 (ae8b741b7c90400c3a5f4ba13533b1a6a75134f768934834b591c8df23eecb83)\nDuring installation or import, the package exfiltrates basic information in a dependency confusion attempt. The user identifies themselves as a HackerOne user abusing the PyPI for the purpose of a bug bounty program.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-hackerone-bugbounty\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - dependency-confusion\n","affected":[{"package":{"name":"lore-cs","ecosystem":"PyPI"},"versions":["1.0.0"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"setup.py","sha256":"65d3409ebd3e5b92933897f7b847a38a1e05439863ed4d4679c9d29aaa0d05a7","tlsh":"fc4187d1cc212da441d7f2e48d256899332dba93bf02685839dc428d1f0f5fd91b2a65"},{"path":"lore_cs/__init__.py","sha256":"5ed355735922de2fee3046a66958d715b3d8eece77bf79bfb397727c06e04716","tlsh":"292166c0c92009912183a3d0953f6976a33471e3bf635c513e8c96dc0f0e86b84f3da4"}],"package_integrity":[{"filename":"lore_cs-1.0.0-py3-none-any.whl","hashes":{"blake2b_256":"f23326bcb5c55c1298a456d0cb043007bede4833a70bc2fa2e6ba022e07d967d","md5":"e4f4f9356413f3aec9870ad6b6259ca4","sha256":"d071c62082afc6237992adf9265c3dfcb858c119a77011baeea879b0c34e48bd"}},{"filename":"lore_cs-1.0.0.tar.gz","hashes":{"blake2b_256":"93821c698a9c361cc8859f13d7dd62cd89b586b6e862e94845aff870541b51b0","md5":"64f98005e339f384fe57b056b511f363","sha256":"37c7268ec40ad049c854f0190ca71ca97c4216d5d9c352f556b7f5bd49fde2ce"}}]}}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/lore-cs"},{"type":"PACKAGE","url":"https://pypi.org/project/lore-cs/1.0.0/"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/GENERIC-hackerone-bugbounty/lore-cs","import_time":"2026-10-06T21:41:45.414022856Z","modified_time":"2026-10-06T21:13:57.624724Z","sha256":"ae8b741b7c90400c3a5f4ba13533b1a6a75134f768934834b591c8df23eecb83","source":"kam193","versions":["1.0.0"]},{"id":"IN-MAL-2026-021129","import_time":"2026-10-08T03:50:29.849075864Z","modified_time":"2026-10-08T03:40:16Z","sha256":"f84e496d81c3e514ec784db2d5996a9015fa9f01f50cb75a99011eb348b2aa07","source":"amazon-inspector","versions":["1.0.0"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}