inversiones-common

GHSA-mx9r-rxmv-xqq7

Malicious code in inversiones-common (PyPI)

Details

**Severity:** Critical

**Affected versions:** `= 99.0.0`

## Source: amazon-inspector (347a767ebbbb5843e6b005c167d98c9ab7b3ea943fadd88401682f2a2b14b2a4)
setup.py executes a `_beacon()` function at module top level (before `setup()` is called), so the payload fires automatically on `pip install inversiones-common`. The beacon collects: hostname, `id`/`uname` output, environment variables (including PIP_INDEX_URL, OKTA_TOKEN, AWS_*, GITHUB_*, and proxy credentials), `/etc/resolv.conf`, `/etc/hosts`, `/etc/machine-id`, pip configuration files (`~/.config/pip/pip.conf`, `/etc/pip.conf`, `~/.pip/pip.conf`) which commonly contain private-index basic-auth credentials, `pip list` output, network interface details, and probes the AWS IMDSv1 endpoint at `http://169.254.169.254/latest/meta-data/iam/security-credentials/` along with GCP and Azure metadata services to harvest cloud instance role credentials. The collected JSON blob is POSTed over plain HTTP to a hardcoded bare IP `http://157.173.126.113:8888/depconf-rce-v2`. The package name `inversiones-common` and version `99.0.1` (an artificially high version chosen to outrank private-index resolutions) target Fintual's internal namespace; the payload includes a `FINTUAL-DEPCONF-RCE-V2` marker and probes `gitea.fintual.in`. Self-described 'authorized bug bounty' framing in the source does not limit blast radius — anyone whose pip resolver picks up this public package, by typo or namespace confusion, will run the beacon and leak secrets to the attacker IP.

## Source: kam193 (db7e12d838a02b689989300eb5fc231e541d2f4af8fd6d92d23baf697d9754f9)
Generic campaign for all (likely) research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side.


---

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.


Campaign: GENERIC-questionable-pentest


Reasons (based on the campaign):


 - exfiltration-env-variables


 - exfiltration-generic


 - The package overrides the install command in setup.py to execute malicious code during installation.


 - t […]

**References:**
- https://bad-packages.kam193.eu/pypi/package/inversiones-common
- https://github.com/ossf/malicious-packages/blob/49d0cfba3689ed9b195d101d3a2a964c6a77f767/osv/malicious/pypi/inversiones-common/MAL-2026-6262.json
- https://pypi.org/project/inversiones-common/99.0.0
- https://pypi.org/project/inversiones-common/99.0.1
- https://github.com/advisories/GHSA-mx9r-rxmv-xqq7

Compromised versions (1)

= 99.0.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.