anthropy

{"modified":"2026-07-08T23:29:53Z","published":"2026-06-05T22:09:46Z","schema_version":"1.7.4","id":"MAL-2026-5273","summary":"Malicious code in anthropy (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (8fa5e8904e682bfc10273961eb25b914c8d79b89e2a6c923c32bb9b3233d41c2)\nThe package `anthropy` is a one-character typosquat of the legitimate `anthropic` PyPI SDK. The sole module `anthropy.py` executes a classic Python reverse shell at import time: it opens a TCP socket to 54.176.251.240:9001, duplicates the socket file descriptor over stdin/stdout/stderr, and spawns an interactive `sh` via `pty.spawn`. The same payload also fires when the `anthropy` console script declared in `pyproject.toml` is invoked. The package ships no API surface matching its name (project summary is just 'hello world') — its only behavior is the reverse shell. Any developer who mistypes `pip install anthropic` and then imports the package, or runs the installed CLI, hands an interactive shell on their machine to the operator of 54.176.251.240.\n\n## Source: kam193 (4f399f7bce64b482a85876e01829154fd6031d69466c7d46543f1126eb12f854)\nDuring import, the package starts a reverse shell\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-06-anthropy\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to create a reverse shell, allowing an attacker to execute any commands on the victim's machine.\n","affected":[{"package":{"ecosystem":"PyPI","name":"anthropy"},"versions":["0.0.1","0.0.2","0.0.3","0.0.4","0.0.5","0.0.6"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"anthropy.py","sha256":"f070479f898f1b7fa161d3267f9ebf730ceb8a3f63929755d85d962565b72f84","tlsh":"7dd022e1f3f2214d3fb441a8204ad19a7ff4a20287d848c00c3d4aa1ab1304c10e4aa2"},{"path":"pyproject.toml","sha256":"e3c3fccc62ef81018ff4bae4980528c6255ed7ceeb4843f1c9403e2c47209cb4","tlsh":"ead0a77789579555afdd4590ec701741f836b01d20b0b018d387c044795a2d9dae5826"}],"package_integrity":[{"filename":"anthropy-0.0.4-py3-none-any.whl","hashes":{"blake2b_256":"1be64d47275cfe6d23a330324f05285be39a9dfb4e4149d3ac7b914d299bd88f","md5":"765e613953177034867e7ca75e93fbdc","sha256":"68e2977938e8cc69a87cf37c9b0bce3c64cdcef5b289e75bfbd1edd77d1997d5"}},{"filename":"anthropy-0.0.4.tar.gz","hashes":{"blake2b_256":"e2e0d08f503f1bef3faf3f39d97e4f6b69221853d8aa010f4cd606ba7310d647","md5":"ba3e91255e13f5c5aae3349a136bfef2","sha256":"14e82582b0c81771035eb2eb18ae543f739f45d98aa395ea1be248f243aa8191"}}]}}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/anthropy"},{"type":"PACKAGE","url":"https://pypi.org/project/anthropy/0.0.4/"},{"type":"PACKAGE","url":"https://pypi.org/project/anthropy/0.0.2/"},{"type":"PACKAGE","url":"https://pypi.org/project/anthropy/0.0.3/"}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["inspector-research@amazon.com"]},{"name":"Kamil Mańkowski (kam193)","type":"REPORTER","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"]}],"database_specific":{"iocs":{"domains":["dns.subtrace.xyz","subtrace.xyz"],"ips":["54.176.251.240"]},"malicious-packages-origins":[{"source":"kam193","sha256":"4f399f7bce64b482a85876e01829154fd6031d69466c7d46543f1126eb12f854","import_time":"2026-06-05T22:52:12.887725134Z","id":"pypi/2026-06-anthropy/anthropy","modified_time":"2026-06-05T22:09:55.762238Z","versions":["0.0.1","0.0.2","0.0.3","0.0.4","0.0.5","0.0.6"]},{"source":"kam193","sha256":"cf774c2d1d55008cff219c973440ec6636c8191921995c31009b9cb114acf477","import_time":"2026-06-08T19:19:19.131505524Z","id":"pypi/2026-06-anthropy/anthropy","modified_time":"2026-06-05T22:09:55.762238Z","versions":["0.0.1","0.0.2","0.0.3","0.0.4","0.0.5","0.0.6"]},{"source":"amazon-inspector","sha256":"8fa5e8904e682bfc10273961eb25b914c8d79b89e2a6c923c32bb9b3233d41c2","import_time":"2026-06-11T03:48:52.291323464Z","id":"IN-MAL-2026-005446","modified_time":"2026-06-11T03:12:46Z","versions":["0.0.4"]},{"source":"amazon-inspector","sha256":"5b1cb17d24e29967c17e65250f4ffb3932dea104746a014aafb4f7cd810765b2","import_time":"2026-07-08T22:51:32.167112496Z","id":"IN-MAL-2026-008889","modified_time":"2026-07-08T22:48:06Z","versions":["0.0.2"]},{"source":"amazon-inspector","sha256":"9ff3e6e9a93a8d3401b31b9de1006b8d71e886a3f1fa365c1e048b02f3a52c22","import_time":"2026-07-08T23:27:57.595712884Z","id":"IN-MAL-2026-008987","modified_time":"2026-07-08T23:02:15Z","versions":["0.0.3"]}]}}