gcp-log-poc

{"schema_version":"1.7.4","id":"MAL-2026-18753","published":"2026-11-07T19:53:11Z","modified":"2026-11-08T10:13:03.546799790Z","summary":"Malicious code in gcp-log-poc (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (cc8768984228dad1312621516f92e43e4c61aa5d310161a286355672d2f09a94)\nThe package runs identical exfiltration code from both setup.py (executed on sdist install) and gcp_log_poc/__init__.py (executed on every `import gcp_log_poc`). On each trigger it collects host identifiers, the installer's public IP (fetched from api.ipify.org), and the entire `os.environ` dict, then ships the payload to Google Cloud Logging under the project `nginxinc` using `log_struct`. Authentication to that logging sink uses a GCP service-account JSON embedded in the source as a large base64 blob that is XOR-decoded at runtime with the hardcoded key `poc-dep-confusion-2026`; the decoded JSON is loaded via `service_account.Credentials.from_service_account_info` and passed to `google.cloud.logging.Client(project=\"nginxinc\")`. The `nginxinc` project name and the XOR-key string identify this as a dependency-confusion payload targeting the nginxinc namespace. Environment variables routinely contain CI secrets, cloud credentials, and registry tokens, so a bulk `os.environ` dump to a destination the installer did not configure is credential exfiltration against the installing host.\n\n## Source: kam193 (2435f0c2437e00d849505352dc39de8d98f7df8b6af4a98a2c39c7d4be4cc01c)\nDuring import, package exfiltrates information about the environment, including potentially sensitive environment variables.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-11-gcp-log-poc\n\n\nReasons (based on the campaign):\n\n\n - exfiltration-env-variables\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n","affected":[{"package":{"name":"gcp-log-poc","ecosystem":"PyPI"},"versions":["0.0.1","0.0.2","0.0.3"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"artifacts":["gcp_log_poc-0.0.3.tar.gz"],"path":"setup.py","sha256":"6bead962225f2592ae42db60247bf58b0a0ff978def99e624c9d6a71ffa1cf89","tlsh":"faa14c056a528c7276c9e016aca3d1503739ae4b2d11f17d3b9f935a8bcca3dd3f6015"}],"package_integrity":[{"filename":"gcp_log_poc-0.0.3-py3-none-any.whl","hashes":{"blake2b_256":"4a8af6913c7c17e6ede8ddda07285d5575b58dc7256b04264ab98fc1f0582401","md5":"e7f7095b01f49d9e5ba32af2670b7159","sha256":"ecab78fe22281e0b1301f6fc2aa7444c98940c269917f4b63169750c4050a89c"}},{"filename":"gcp_log_poc-0.0.3.tar.gz","hashes":{"blake2b_256":"f093600f774a98ef7e52cff16fa99a5a29bf1d19a60d51e78dadc3ef9c59bcaa","md5":"51be3466357b128311d83f4bd5279131","sha256":"581709c98201917c8e857cecd9197a24a0c897444e40f6098d0b7416c25df61b"}}]}}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/gcp-log-poc"},{"type":"PACKAGE","url":"https://pypi.org/project/gcp-log-poc/0.0.3/"},{"type":"PACKAGE","url":"https://pypi.org/project/gcp-log-poc/0.0.1/"},{"type":"PACKAGE","url":"https://pypi.org/project/gcp-log-poc/0.0.2/"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/2026-11-gcp-log-poc/gcp-log-poc","import_time":"2026-11-07T20:11:09.562190877Z","modified_time":"2026-11-07T19:53:11.215199Z","sha256":"2435f0c2437e00d849505352dc39de8d98f7df8b6af4a98a2c39c7d4be4cc01c","source":"kam193","versions":["0.0.1","0.0.2","0.0.3"]},{"id":"IN-MAL-2026-022573","import_time":"2026-11-08T10:11:09.679313045Z","modified_time":"2026-11-08T09:41:40Z","sha256":"cc8768984228dad1312621516f92e43e4c61aa5d310161a286355672d2f09a94","source":"amazon-inspector","versions":["0.0.3"]},{"id":"IN-MAL-2026-022574","import_time":"2026-11-08T10:11:09.814095253Z","modified_time":"2026-11-08T09:41:48Z","sha256":"dfa3ab3f889efefa8eafc56c0379eb8fc3246e1517f699642a9eace2837d4157","source":"amazon-inspector","versions":["0.0.1"]},{"id":"IN-MAL-2026-022572","import_time":"2026-11-08T10:11:09.59399453Z","modified_time":"2026-11-08T09:41:33Z","sha256":"e716bbfb2b65c5fbb5ea6c0d8b256b293682f261abf518f5a4bd224d207bfa54","source":"amazon-inspector","versions":["0.0.2"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}