If this package is installed
Remove it, treat the machine (or CI runner) as compromised, and rotate every secret, token and key it could access — from a different, clean machine.
Details
Source: amazon-inspector (55c4f419c883d30c0099a7120b0456d975af824e08310e0750166d074def3204)
The sdist's setup.py overrides the install command with a class that, during `pip install`, collects the installer's hostname via socket.gethostname() and resolves its IP via socket.gethostbyname(), then POSTs them as JSON to a hardcoded webhook.site collector URL (https://webhook.site/711f31ae-7091-4b68-9631-57b6c6f19980) using urllib.request.urlopen. The package ships no actual functionality: msgpackrpc/__init__.py is empty, the project metadata self-describes as a 'POC package (beacon-only)', and the author field is the placeholder 'Your Name'. The package name is a typosquat shape against the legitimate msgpack-rpc ecosystem. Installing this version causes the installer's host identifiers to leave the machine to an attacker-controlled endpoint with no disclosure or consent.
Source: kam193 (9747a902bd61a745ec9c8f569f57417303f828b441c3e4e8c95101adf1498d13)
Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.
---
Category: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.
Campaign: GENERIC-standard-pypi-install-pentest
Reasons (based on the campaign):
- The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.
- The package overrides the install command in setup.py to execute malicious code during installation.