bq-helix-recon-6ade983e

{"schema_version":"1.7.4","id":"MAL-2026-18396","published":"2026-10-29T19:56:11Z","modified":"2026-10-30T12:43:49.404854918Z","summary":"Malicious code in bq-helix-recon-6ade983e (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (3a2ea78473cb414982a67f3fa93db3427b98c6e3bcc5d70f6bbb0ededba7791e)\nThe package ships bq_helix_recon.pth plus sitecustomize.py/usercustomize.py that invoke bootstrap() on every Python interpreter start — including pip's own subsequent interpreter invocations immediately after install — with no import or user action required. The bootstrap payload collects the full process environment (dict(os.environ)), hostname/uid/user, /proc/self/* entries (cmdline, status, cgroup, mountinfo, net/tcp, fds, namespaces), and walks /, /workspace, /root, /home, and /tmp. It also queries the GCE metadata server at 169.254.169.254 for instance/service-accounts/default/token and reads credential files including /root/.docker/config.json, application_default_credentials.json, and the file referenced by GOOGLE_APPLICATION_CREDENTIALS. The collected data is POSTed in cleartext to http://34.45.253.92:8080/bq-helix-recon-6ade983e and sent over TCP to 34.45.253.92:1234. SystemExit is raised in non-runtime phases to further ensure persistent recon execution.\n\n## Source: kam193 (9663aaa7e713f47d83da712da5653aa7d3e1919fd70419d9fc5749145f575b17)\nPackage places PTH/sitecustomize files triggering execution of malicious code on every Python startup. The code then collects information from the environment, including credential files, environment variables, data from cloud metadata endpoints, and finally exfiltrates them.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-10-bq-helix-recon\n\n\nReasons (based on the campaign):\n\n\n - abuses-pth\n\n\n - exfiltration-cloud-tokens\n\n\n - exfiltration-generic\n\n\n - exfiltration-env-variables\n\n\n - exfiltration-credentials\n","affected":[{"package":{"name":"bq-helix-recon-6ade983e","ecosystem":"PyPI"},"versions":["0.1.0","0.1.2"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"bq_helix_recon.py","sha256":"2fd7266c4fdb96f9b3df84e13af272782f0b91c663abcd6ac44ade1243179804","tlsh":"4a025085cca96c03e5c77249691af991b318aa871d047c24bbec961c5f8d03fa0f6bdd"},{"path":"sitecustomize.py","sha256":"a6af375ee721465ae7223e999e5f89a82b3d149092dd0dda3577343dcf4307eb","tlsh":"19a0025501153ce4530c00572225b320da53b44c3bc0c44b031b5ff577d43cd38a1707"}],"package_integrity":[{"filename":"bq_helix_recon_6ade983e-0.1.0-py3-none-any.whl","hashes":{"blake2b_256":"d8fa165a406b690dbb46c0d420015a26debd17196a309046153a82cee320c652","md5":"2bd9e3fa524e0409e6f3340dc9336b36","sha256":"5b3767fe14cf47b1050b23f31fac06f1ba5d3ca93ae66db9eb92b312b3ced0d2"}}]}}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/bq-helix-recon-6ade983e"},{"type":"PACKAGE","url":"https://pypi.org/project/bq-helix-recon-6ade983e/0.1.0/"},{"type":"PACKAGE","url":"https://pypi.org/project/bq-helix-recon-6ade983e/0.1.2/"}],"database_specific":{"iocs":{"ips":["34.45.253.92"],"urls":["http://34.45.253.92:8080/bq-helix-recon-6ade983e"]},"malicious-packages-origins":[{"id":"pypi/2026-10-bq-helix-recon/bq-helix-recon-6ade983e","import_time":"2026-10-29T20:13:26.858869241Z","modified_time":"2026-10-29T19:56:11.502559Z","sha256":"9663aaa7e713f47d83da712da5653aa7d3e1919fd70419d9fc5749145f575b17","source":"kam193","versions":["0.1.0","0.1.2"]},{"id":"IN-MAL-2026-022421","import_time":"2026-10-30T12:42:29.548894511Z","modified_time":"2026-10-30T12:28:19Z","sha256":"42b9d42c0df26c42f790d5ec936ae4581938740f6e63807c06c58760732f5c94","source":"amazon-inspector","versions":["0.1.0"]},{"id":"IN-MAL-2026-022418","import_time":"2026-10-30T12:42:29.441035232Z","modified_time":"2026-10-30T12:27:57Z","sha256":"3a2ea78473cb414982a67f3fa93db3427b98c6e3bcc5d70f6bbb0ededba7791e","source":"amazon-inspector","versions":["0.1.2"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}