MAL-2026-18749: Malicious code in qzc690382 (PyPI)

Published Nov 7, 2026

Updated

--- -= Per source details. Do not edit below this line.=-

Source: amazon-inspector (b34d702840be6773d3d41444f836f45dab6a8e3524fcc8e4cd6d224ac3a77f1e) The package body is inert (init.py contains only #c\n); the entire functionality lives in setup.py, which runs on pip install. During install, setup.py writes a Python HTTP server script to /tmp/.kxs and launches it detached via subprocess.Popen([sys.executable, '/tmp/.kxs'], startnewsession=True). The server binds 0.0.0.0 on ports 9998, 9999, 8089, 8099, and 8899 and executes any shell command passed in a GET c= query parameter via subprocess.run(c, shell=True,...), gated only by a token stored at /tmp/.kxq. The result is a persistent, network-exposed shell on all interfaces of the installing machine, running as the installing user, with no relationship to building or using any advertised functionality.

Affected Software

1 affected component

pip/qzc690382=1.0.0

Event History

Nov 7, 2026

Advisory Published

via OSV·10:21 AM

Data Sourced

via OSV·10:21 AM

DescriptionAffected Software

Frequently Asked Questions

Which systems are exposed to the network service?

Any machine where the package is installed can be exposed because the installed script binds to 0.0.0.0. It listens on ports 9998, 9999, 8089, 8099, and 8899, so systems reachable over the network on any of those ports are relevant.

When does the malicious behavior run, and what privileges does it have?

The behavior runs during pip installation through setup.py; the package body itself is inert. The detached server runs as the user who performed the installation.

What does an attacker need to execute commands?

The server executes shell commands supplied through a GET c= query parameter. Command execution is gated by a token stored in /tmp/.kxq.

How can I check whether a host may already be affected?

Look for /tmp/.kxs, the Python HTTP-server script written during installation, and /tmp/.kxq, which stores the token. Also check for a detached Python process serving those files or listeners on ports 9998, 9999, 8089, 8099, or 8899.

MAL-2026-18749: Malicious code in qzc690382 (PyPI)

Affected Software

Event History

Frequently Asked Questions

Which systems are exposed to the network service?

When does the malicious behavior run, and what privileges does it have?

What does an attacker need to execute commands?

How can I check whether a host may already be affected?

Company

Resources

Contact

Frequently Asked Questions

Which systems are exposed to the network service?

When does the malicious behavior run, and what privileges does it have?

What does an attacker need to execute commands?

How can I check whether a host may already be affected?