darkglitch

GHSA-qvmp-g666-g29h

Malicious code in darkglitch (PyPI)

Details

**Severity:** Critical

**Affected versions:** `= 1.2.0`

## Source: amazon-inspector (6d02eb8be388433532783a7bf88864824b50756b7ced4f8728721866740c5df1)
darkglitch 1.2.0 ships a listener mode (`-l -c`) that opens a WebSocket connection to the hardcoded signaling host `https://malware-signal.vercel.app/` and joins the fixed room `D4RKGLI7CH`. Incoming `remote-command` messages are passed directly into `subprocess.run(command, shell=True)` inside `_execute_command`, giving any party with access to that signaling server arbitrary shell execution on the host running the listener. `core/config.py` hardcodes the host and room. The `-r/--run` mode invokes PyInstaller with `--noconsole --onefile` to build `darkglitch_listener.exe`, a windowless Windows agent whose entry point immediately calls `asyncio.run(listen_bash_mode())`, packaging the same remote-shell listener as a hidden persistent agent. The self-labeling of the host as `malware-signal.vercel.app` and the room as `D4RKGLI7CH` matches the operational shape of a remote-access trojan.

---

Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/49d0cfba3689ed9b195d101d3a2a964c6a77f767/osv/malicious/pypi/darkglitch/MAL-2026-10756.json))

**References:**
- https://github.com/ossf/malicious-packages/blob/49d0cfba3689ed9b195d101d3a2a964c6a77f767/osv/malicious/pypi/darkglitch/MAL-2026-10756.json
- https://pypi.org/project/darkglitch/1.2.0
- https://github.com/advisories/GHSA-qvmp-g666-g29h

Compromised versions (1)

= 1.2.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.