VLifeGram

{"modified":"2026-05-20T17:29:55Z","published":"2026-05-20T17:29:55Z","schema_version":"1.7.4","id":"MAL-2026-4773","summary":"Malicious code in vlifegram (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (8771013473b84f29159a80ec15ce3e9897bc69908ddfa2438845811dd276d87c)\nVLifeGram is published under its own name on PyPI but installs into the `pyrogram/` namespace and ships a Pyrogram fork at version 2.1.2.4. It adds an undocumented module `pyrogram/helpers/secret.py`. In `pyrogram/methods/utilities/start.py` (around line 73), `Client.start()` imports `pyrogram.helpers.secret` and invokes `secret.init(self)` whenever the running account is a bot. `secret.init` registers hidden Telegram message handlers gated by a hardcoded operator list `OWNERS = [842320686, 845521076, 1675073032]` (secret.py:91). The `/asu` and `/wann` commands pass message text to `exec(compile(...))`, executing arbitrary Python in the bot process; `/asi` and `/wann2` pass message text to `subprocess.run([\"/bin/bash\", \"-c\", cmd])`, giving full shell access on the host running the bot. Because the package installs into the `pyrogram` namespace, any existing project that does `from pyrogram import Client` will silently load this backdoored fork once VLifeGram is present in the environment, with no code change required. Network channel for command-and-control is Telegram itself (the same connection the legitimate library opens), so the backdoor blends into normal bot traffic. The three hardcoded operator IDs gain persistent remote Python and shell execution on every host that starts a bot using this library.\n","affected":[{"package":{"ecosystem":"PyPI","name":"VLifeGram"},"versions":["2.1.2.4"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"pyrogram/helpers/secret.py","sha256":"edcdaaa84967bf2274e6ce078f4db42018d72cce3cd91a209668f7f7831f8600","tlsh":"70227614cc6b6c508232e22efd5ab086e7299707351666637cfca368bf78811d7a574c"},{"path":"setup.py","sha256":"4801900e8c9125b1a3680ceed0742cc56ec80023e7ec184ca699acfa815db475","tlsh":"4961214a8dc95ab51bc040c5390f488a9322e9673d4964c47bbe831faf6ee3f017a17c"}],"package_integrity":[{"filename":"vlifegram-2.1.2.4.tar.gz","hashes":{"blake2b_256":"f7560769e7034225ef499fc352e20171dcf37ce34b9d1bfc793e9b473a1f6130","md5":"e9654d5b1dc430b7a0baff0344776464","sha256":"4bb80b995c93a381d4cbb78a40be6efdca620a72b147eaf440da627a285eef15"}}]}}}],"references":[{"type":"PACKAGE","url":"https://pypi.org/project/VLifeGram/2.1.2.4/"}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["actran@amazon.com"]}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-003578","import_time":"2026-05-26T05:50:53.724348116Z","modified_time":"2026-05-20T17:29:55Z","sha256":"8771013473b84f29159a80ec15ce3e9897bc69908ddfa2438845811dd276d87c","source":"amazon-inspector","versions":["2.1.2.4"]}]}}