If this package is installed
Remove it, treat the machine (or CI runner) as compromised, and rotate every secret, token and key it could access — from a different, clean machine.
Details
Source: amazon-inspector (3d69143a6cdc0a652f91210034751420f7ada3db2a13d81d9e635e3a63333dc5)
On `import kb_ai`, the package's `__init__.py` triggers `kb_ai.utils.callback`, which starts a background thread that collects installer host identifiers (hostname, platform, Python version, timestamp) and POSTs them to a hardcoded Azure-hosted endpoint at bybitpoc-f2b2b4gfbefufvfc.canadacentral-01.azurewebsites.net/callback. The network call is unconditional, fires without caller opt-in, and errors are silently swallowed. The module's own comments describe the behavior as a supply-chain proof-of-concept.
Source: kam193 (edd64785c168e513c50673e9b031048ba592c1460a9a952f9430feb83bf5042d)
The main purpose of the package is to demonstrate a dependency confusion attack. The rest of the functionality is just a stub.
---
Category: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.
Campaign: GENERIC-standard-pypi-install-pentest
Reasons (based on the campaign):
- The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.
- The package overrides the install command in setup.py to execute malicious code during installation.