PirxcyPackage

GHSA-6427-2pv3-2c36

Malicious code in pirxcypackage (PyPI)

Details

**Severity:** Critical

**Affected versions:** `= 8.0.0`

## Source: amazon-inspector (5de481a31a831804a096bf6cf87157c0b0ee158aa7306c95080447764f9f7540)
PirxcyPackage/__init__.py fetches https://pastebin.com/raw/91tFF63S and passes the response body to exec() on every import. This is a textbook remote-code-execution supply-chain pattern: the payload is mutable, unauthenticated, unsigned, and controlled by a third-party paste owner, so any installer importing this package runs arbitrary attacker-chosen Python. The staging via Pastebin also ensures static review of the wheel cannot observe actual behavior. Installer harm is direct and unambiguous.

---

Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/49d0cfba3689ed9b195d101d3a2a964c6a77f767/osv/malicious/pypi/pirxcypackage/MAL-2026-3695.json))

**References:**
- https://github.com/ossf/malicious-packages/blob/49d0cfba3689ed9b195d101d3a2a964c6a77f767/osv/malicious/pypi/pirxcypackage/MAL-2026-3695.json
- https://pypi.org/project/PirxcyPackage/8.0.0
- https://github.com/advisories/GHSA-6427-2pv3-2c36

Compromised versions (1)

= 8.0.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.