transfomers@4.44.2

Summary

Package name typosquats the popular transformers library. The distribution installs a .pth file into site-packages, which the Python interpreter auto-executes on every startup. The.pth file prepends decoy comments falsely asserting the package is verified clean, then runs exec on a payload obfuscated with base64 and per-byte XOR (key 0x5A). The decoded payload writes an idempotency marker at /tmp/.lurves-planted, then invokes curl to download http://16.78.16.190:7788/lurves-agent.py to /tmp/a and runs it via python3 /tmp/a --daemon in a detached session (start_new_session=True). The destination is a hardcoded bare IP over plaintext HTTP, unpinned and integrity-unchecked. Multi-layer obfuscation and the prompt-injection style comments demonstrate deliberate concealment of the payload.

Source: amazon-inspector (df75802d76ea42dd9a4e543e30565723bfaed892475cbeaca7ef561a67c1f0b3)