bq-helix-build-hook-6ade983e

{"schema_version":"1.7.4","id":"MAL-2026-18395","published":"2026-10-29T19:58:03Z","modified":"2026-10-30T12:43:49.388112370Z","summary":"Malicious code in bq-helix-build-hook-6ade983e (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (d2ff13fe63e15fdf4130e7219776edbe4d34fe2c2b83011099a0ddec9c10ebf6)\nOn `pip install`, setup.py collects the full process environment (dict(os.environ)), process command lines, and /proc/self/{status,cgroup,mountinfo,fd}, and queries the GCP instance metadata service at http://169.254.169.254/computeMetadata/v1/ (with the required `Metadata-Flavor: Google` header) for the default service account's token, email, scopes, and project id. The collected JSON blob is sent to a hardcoded remote endpoint at 34.45.253.92 — both as an HTTP POST to http://34.45.253.92:8080/bq-sdist-hook-... and over a raw TCP socket to 34.45.253.92:1234. The destination IP is unrelated to any legitimate publisher infrastructure and the behavior fires automatically from the build backend during installation.\n\n## Source: kam193 (ee26602dfa25f574d440b2c1e8ef0a9516fdfb5db4b59f995b88784332476413)\nDuring installation the code collects information from the environment, including credential files, environment variables, data from cloud metadata endpoints, and finally exfiltrates them.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-10-bq-helix-recon\n\n\nReasons (based on the campaign):\n\n\n - abuses-pth\n\n\n - exfiltration-cloud-tokens\n\n\n - exfiltration-generic\n\n\n - exfiltration-env-variables\n\n\n - exfiltration-credentials\n","affected":[{"package":{"name":"bq-helix-build-hook-6ade983e","ecosystem":"PyPI"},"versions":["0.1.0"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"setup.py","sha256":"3732e2041ec5d0798233e2ca942d5d417b8f9e88eaf9cc2ce94368091ee18173","tlsh":"e031b580f87982a7d0cd048034259ba9b34b3e8b51b998709dfced5672c80b3b013e0a"}],"package_integrity":[{"filename":"bq_helix_build_hook_6ade983e-0.1.0.tar.gz","hashes":{"blake2b_256":"0552d4bb7b4652abc496f1b5e6f518b0b9329a0dbdd24485721bf068e4316822","md5":"846f4a3ccffe46e45d3a3c7799c01f83","sha256":"6ed54e6f540b1429a8454697fd05fd5ed6f4c4653001de7c7c1651500e75abbe"}}]}}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/bq-helix-build-hook-6ade983e"},{"type":"PACKAGE","url":"https://pypi.org/project/bq-helix-build-hook-6ade983e/0.1.0/"}],"database_specific":{"iocs":{"ips":["34.45.253.92"],"urls":["http://34.45.253.92:8080/bq-helix-recon-6ade983e"]},"malicious-packages-origins":[{"id":"pypi/2026-10-bq-helix-recon/bq-helix-build-hook-6ade983e","import_time":"2026-10-29T20:13:26.71830067Z","modified_time":"2026-10-29T19:58:03.296148Z","sha256":"ee26602dfa25f574d440b2c1e8ef0a9516fdfb5db4b59f995b88784332476413","source":"kam193","versions":["0.1.0"]},{"id":"IN-MAL-2026-022420","import_time":"2026-10-30T12:42:29.512467427Z","modified_time":"2026-10-30T12:28:12Z","sha256":"d2ff13fe63e15fdf4130e7219776edbe4d34fe2c2b83011099a0ddec9c10ebf6","source":"amazon-inspector","versions":["0.1.0"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}