Unverified50% confidenceSolutionExact time
在Python生态中恶意代码可注入到包的setup.py（pip install时运行）或隐藏在__init__.py中（import时触发），并通过读取~/.aws/credentials、扫描.env文件等方式窃取凭证
1
Sources
50%
Confidence
Long-term
Relevance
8/4/2026
First Seen
Sources
Related Claims
UnverifiedPython's pickle module executes arbitrary Python code during deserialization, posing a security risk of remote code execution via maliciously crafted files.70% similarUnverified恶意包携带的 .pth 文件会在 Python 解释器启动时执行，而非在代码 import 时才触发69% similarUnverifiedPackaged Python programs are sometimes flagged as malware by antivirus software, because the decompression and launch mechanism of packaging tools shares similarities with certain malware packing behaviors.65% similarVerifiedPython pickle格式在反序列化时可以执行任意代码，攻击者可以在模型文件中嵌入恶意代码63% similarUnverifiedPixi的锁文件覆盖范围延伸到系统级二进制依赖，这是pip/uv等纯Python工具无法实现的62% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/681536API
curl https://kongchang.com/api/v1/knowledge/claims/681536MCP
get_claim(id=681536)