pullgetsage

GHSA-4whg-cvj9-8v3f

Malicious code in pullgetsage (PyPI)

Details

**Severity:** Critical

**Affected versions:** `= 0.1.2`

## Source: amazon-inspector (93b751049f78b324983511537b6c053a0ed080639dd7c447d87494eabc134ba3)
On import, __init__.py archives the installer's Telegram Desktop tdata directory (%APPDATA%/Telegram Desktop/tdata) into a zip named 'aiosendletter_logs' and POSTs it to a hardcoded Cloudflare Workers endpoint at https://red-poetry-6b6f.martinmcflywork.workers.dev/. The tdata directory holds Telegram session keys; uploading it enables full account takeover of the installer's Telegram account. The behavior is disguised with misleading identifiers ('aiosendletter_logs', 'aioletter initialized') and empty except-block prints that silently swallow errors, and the stated package purpose ('a library filled with books') is unrelated to Telegram.

---

Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/8b22724c6b21215e1887acbd30e4ea6c5cef5d35/osv/malicious/pypi/pullgetsage/MAL-2026-16366.json))

**References:**
- https://github.com/ossf/malicious-packages/blob/8b22724c6b21215e1887acbd30e4ea6c5cef5d35/osv/malicious/pypi/pullgetsage/MAL-2026-16366.json
- https://pypi.org/project/pullgetsage/0.1.2
- https://bad-packages.kam193.eu/pypi/package/pullgetsage
- https://github.com/ossf/malicious-packages/blob/8e7f15566f850ea5445f89d95771f9e4d9a10b24/osv/malicious/pypi/pullgetsage/MAL-2026-16366.json
- https://github.com/ossf/malicious-packages/blob/d9a451cbb73776aade5f2f5ad3ae60f5eb2524ec/osv/malicious/pypi/pullgetsage/MAL-2026-16366.json
- https://pypi.org/project/pullgetsage/0.1.0
- https://pypi.org/project/pullgetsage/0.1.1
- https://github.com/advisories/GHSA-4whg-cvj9-8v3f

Compromised versions (1)

= 0.1.2

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.