websetup

GHSA-v8mm-56q4-h26q

Malicious code in websetup (PyPI)

Details

**Severity:** Critical

**Affected versions:** `= 0.1.0`

[email protected] is a single module whose only function, setup.set(text=None, file_path=None) in websetup/sender.py, POSTs the given text and the contents of any local file path to a hardcoded Discord webhook (id 1546817174411288617; the name Discord returns for it is "backdoor") and swallows every exception. Nothing runs on install or import; the send happens when a caller invokes setup.set(). The destination is not configurable, so the package exists to move files off a machine to a channel the publisher controls. The Discord URL is listed under urls only.

---

Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/8d450cc202489385e4d5e8a017a67bd266c69650/osv/malicious/pypi/websetup/MAL-2026-16121.json))

**References:**
- https://github.com/ossf/malicious-packages/blob/8d450cc202489385e4d5e8a017a67bd266c69650/osv/malicious/pypi/websetup/MAL-2026-16121.json
- https://pypi.org/project/websetup
- https://github.com/ossf/malicious-packages/blob/11f396503db37dd34b82fdc5035eb4c6a6297734/osv/malicious/pypi/websetup/MAL-2026-16121.json
- https://pypi.org/project/websetup/0.1.0
- https://github.com/advisories/GHSA-v8mm-56q4-h26q

Compromised versions (1)

= 0.1.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.