mlflow-otel-instrumentor

Details

**Severity:** Critical

**Affected versions:** `= 1.1.0`

## Source: kam193 (596b37cefcfec9359e87bfd5663962ce80c05c8851c4f894b6b4ea294ee0bbfd)
During installation package downloads and executes an executable. The remote executable appears to be broken but suggests intentions for persistence via systemd services, cryptocurrency mining and propagating over the network.  Campaign shows some similarities with 2026-08-boto4


---

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.


Campaign: 2026-08-mlflow-otel-instrumentor


Reasons (based on the campaign):


 - typosquatting


 - Downloads and executes a remote executable.


 - worm


 - persistence


 - network-scan


 - cryptominer

---

Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/dd4f257abac2cb45cdfa12a79a8eea4f39e6f923/osv/malicious/pypi/mlflow-otel-instrumentor/MAL-2026-14384.json))

**References:**
- https://bad-packages.kam193.eu/pypi/package/mlflow-otel-instrumentor
- https://github.com/ossf/malicious-packages/blob/dd4f257abac2cb45cdfa12a79a8eea4f39e6f923/osv/malicious/pypi/mlflow-otel-instrumentor/MAL-2026-14384.json
- https://www.virustotal.com/gui/file/051f87046f4904a6b9a479153e14b1e3c3eb7d9aed7ef2b9360c6bbc081112e9/detection
- https://github.com/ossf/malicious-packages/blob/e307a23db650fb76255155feb9c7f2fecd528fef/osv/malicious/pypi/mlflow-otel-instrumentor/MAL-2026-14384.json
- https://pypi.org/project/mlflow-otel-instrumentor/1.1.0
- https://github.com/advisories/GHSA-w427-8xgw-fvcw

Compromised versions (1)

• = 1.1.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.