asrdock

{"schema_version":"1.7.4","id":"MAL-2026-18156","published":"2026-10-22T00:28:12Z","modified":"2026-10-29T14:38:27.522123669Z","summary":"Malicious code in asrdock (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (df355a2f1d1cc0d420f953cf7f89aefb0ff9a6ae0c366552fbb8e94e319b151a)\nAnalysis of asrdock 0.1.0 on PyPI produced no indicators of installer-side harm. No install-time or import-time network activity, no credential or filesystem secret reads, no fetch-and-execute of remote content, no silent relay, no backdoor, and no destructive behavior were observed in the shipped files.\n\n## Source: kam193 (f6bd33cecc5263c6ff8d666d61c33ddbe5b487331c1f2edd13873c1eef145b5c)\nThis campaign consists of similar loader packages, which provide executing code from a given URL. While they do not contain the malicious payload and the usage remains unknown, they are clearly a coordinated campaign to place multiple deceptive ways to load malicious code.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-10-voice-synthesis-profiles\n\n\nReasons (based on the campaign):\n\n\n - other\n\n\n - Downloads and executes a remote malicious script.\n","affected":[{"package":{"name":"asrdock","ecosystem":"PyPI"},"versions":["0.1.0"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"package_integrity":[{"filename":"asrdock-0.1.0-py3-none-any.whl","hashes":{"blake2b_256":"efe0f6323e17f54cc3d11e4d1423e243a89a2f4021935141aa40755f7cea8dc5","md5":"223eceb2feb4464b5ac3dc6b01d3067a","sha256":"f8d820475764a20cb4f101cdbd60d074755945cfdfbd270e21d74b8ac88a2021"}},{"filename":"asrdock-0.1.0.tar.gz","hashes":{"blake2b_256":"31a9feaae00d26d79b049ae61b885f7e2a8db2f268f7520b10ef03dd65c61d88","md5":"0f7716b8e5c563885c4189b7b5077202","sha256":"22359843681aff4e713787011772f5a8a7777563c171abae0504e268ed8cd4ce"}}]}}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/asrdock"},{"type":"PACKAGE","url":"https://pypi.org/project/asrdock/0.1.0/"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/2026-10-voice-synthesis-profiles/asrdock","import_time":"2026-10-22T01:26:38.716181964Z","modified_time":"2026-10-22T00:28:12.431793Z","sha256":"f6bd33cecc5263c6ff8d666d61c33ddbe5b487331c1f2edd13873c1eef145b5c","source":"kam193","versions":["0.1.0"]},{"id":"IN-MAL-2026-022339","import_time":"2026-10-29T14:37:04.859213843Z","modified_time":"2026-10-29T14:20:03Z","sha256":"df355a2f1d1cc0d420f953cf7f89aefb0ff9a6ae0c366552fbb8e94e319b151a","source":"amazon-inspector","versions":["0.1.0"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}