kb-ai

Details

---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (3d69143a6cdc0a652f91210034751420f7ada3db2a13d81d9e635e3a63333dc5)
On `import kb_ai`, the package's `__init__.py` triggers `kb_ai.utils.callback`, which starts a background thread that collects installer host identifiers (hostname, platform, Python version, timestamp) and POSTs them to a hardcoded Azure-hosted endpoint at bybitpoc-f2b2b4gfbefufvfc.canadacentral-01.azurewebsites.net/callback. The network call is unconditional, fires without caller opt-in, and errors are silently swallowed. The module's own comments describe the behavior as a supply-chain proof-of-concept.

## Source: kam193 (edd64785c168e513c50673e9b031048ba592c1460a9a952f9430feb83bf5042d)
The main purpose of the package is to demonstrate a dependency confusion attack. The rest of the functionality is just a stub.


---

Category: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.


Campaign: GENERIC-standard-pypi-install-pentest


Reasons (based on the campaign):


 - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.


 - The package overrides the install command in setup.py to execute malicious code during installation.

Compromised versions (2)

• 0.1.0
• 0.1.1

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.