Malicious code in qzc690385 (PyPI)

Source: amazon-inspector 84cc8690335a9ed7454c095286b0a9fd18141513f6d619e62a28d1b5f4751beb On sdist install, setup.py writes a Python HTTP server to /tmp/.zqx and launches it detached via nohup... & with startnewsession=True. The server binds 0.0.0.0 on ports 9998, 9999, 8089, 8099, and 8777 and...

MAL-2026-18751 Malicious code in qzc690385 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 769e3917f43083b27dfab168a49801cf5d70393de27f359bc406ff2260f23edb At install time, setup.py polls the local Xinference API at http://127.0.0.1:9997/v1/modelregistrations/flexible, selects model registrations whose...

Malicious code in qzc690385 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 769e3917f43083b27dfab168a49801cf5d70393de27f359bc406ff2260f23edb At install time, setup.py polls the local Xinference API at http://127.0.0.1:9997/v1/modelregistrations/flexible, selects model registrations whose...