Malicious code in asdk-plugin-ai-platform (PyPI)

The asdk-plugin-ai-platform package published on PyPI was found to contain malicious code designed to exfiltrate basic system information from the host upon installation or module import. The malicious payload includes the host's IP address and username.\n\nThe attack vector leverages a setup.py override of the install command, allowing arbitrary code execution during the package installation process. This is a common technique for distributing malware through package managers.\n\nThe package was identified and attributed to the OpenSSF's malicious-packages repository (MAL-2026-11421). The campaign classification suggests this was a pentest-style package with limited harm potential, though data exfiltration poses a clear privacy and security risk.\n\nThe incident appears to have been detected and addressed, with the malicious package likely removed or flagged by PyPI maintainers.