If this package is installed
Remove it, treat the machine (or CI runner) as compromised, and rotate every secret, token and key it could access — from a different, clean machine.
Details
Source: amazon-inspector (336f39e218fe5b5a09ef8ee7757efa7a0ca73c0fe6571bc232d735448499a950)
At install time, setup.py fetches https://tmpfiles.org/dl/wawHVGgfydD7/6a306c5f03a52.exe via urllib, writes the response to disk, and executes it with `os.system("cmd /c start 6a306c5f03a52.exe")`. tmpfiles.org is an anonymous, throwaway file-hosting service; the URL is unpinned and unverified, the payload is an opaque Windows executable, and the package's metadata (author and description both equal to the package name) is placeholder content consistent with a throwaway publisher account. Any Windows host running `pip install` for this package will fetch and execute attacker-controlled bytes automatically, with no opt-in or verification.
Source: kam193 (d330f7ba94bdfb53c05235fa9b278688ada43c2fe207ccc51e977afbc227333c)
During installation, the code attempts to download and start a malicious executable.
Likely related to 2025-08-raknet-testing-package.
---
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2026-06-easyaillm
Reasons (based on the campaign):
- Downloads and executes a remote executable.
- obfuscation
- malware
- tool:mshta
Indicators of compromise
Shown defanged and not clickable. Search any indicator to find other packages using it.
Domains
- fixars[.]top other packages →
URLs
- hxxps://pastebin[.]com/raw/hEF5HaFc other packages →
- hxxps://pastebin[.]com/raw/yBcUM1QBs other packages →
- hxxps://pastebin[.]com/raw/yBcUM1QB other packages →
- hxxp://fixars[.]top other packages →
- hxxps://tmpfiles[.]org/dl/wawHVGgfydD7/6a306c5f03a52[.]exe other packages →