kaggle-runner

Run kaggle kernels, for fast model prototyping.

View on Pypi

Activity

Latest release: 6y ago
Total releases: 17
Cadence: ~2 days
Last 12 months: 0

Details

License: MIT
First release: May 11, 2020

Releases

Version	Released
`0.2.1` patch	Jul 15, 2020
`0.2.0` minor	Jul 15, 2020
`0.1.7` patch	Jul 02, 2020
`0.1.5` patch	Jun 06, 2020
`0.1.3` patch	Jun 02, 2020
`0.1.2` patch	Jun 01, 2020
`0.1.1` patch	May 30, 2020
`0.1.0` minor	May 28, 2020
`0.0.9` patch	May 26, 2020
`0.0.8` patch	May 23, 2020
`0.0.7` patch	May 23, 2020
`0.0.6` patch	May 20, 2020
`0.0.5` patch	May 18, 2020
`0.0.4` patch	May 17, 2020
`0.0.3` patch	May 14, 2020
`0.0.2` patch 1 CVE	May 11, 2020
`0.0.1` initial	May 11, 2020

Dependencies (5)

Depends on

0.2.1

Supply-chain exposure

Known CVEs (1)

MAL-2026-3693 Malware May 12, 2026

Malicious code in kaggle-runner (PyPI)

Critical

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (8dcd49ca70b987b236ba4341d839addfec9afb344e1471195f2f825281092f71)

kaggle_runner/coordinator.py embeds a bash reverse-shell template (rvs_str) that connects to vtool.duckdns.org:23454 via ncat with retry/backoff plus a heartbeat channel on port 23455. When a consumer calls Coordinator.create_runner(config), the package writes rvs.sh alongside entry.sh/runner.sh/setup_pty/gdrive_setup into a kernel folder; Coordinator.run_local() then executes python main.py, which invokes bash -x entry.sh, which in turn backgrounds rvs.sh — opening an interactive shell from the runner's host back to the author-controlled duckdns.org subdomain. The same bundle wgets a gdrive binary from github.com/gdrive-org/gdrive/releases/download/2.1.0/gdrive-linux-x64 and installs it to /bin/gdrive. None of this behavior is documented in the README (which advertises AMQP logging for Kaggle kernels). The reverse shell does not fire at import/install time — setup.py and init.py are clean — but it fires as part of the package's advertised Coordinator API flow, so any consumer who actually uses the library exposes the executing host (their machine or a Kaggle kernel they push) to the author. A separate file (kaggle_runner/utils/utils.py) also hardcodes CloudAMQP credentials (termite.rmq.cloudamqp.com / drdsfaew) with a comment 'oh~ just give my password out~' — this is author self-harm and on its own would be allow, but combined with the reverse-shell pipe to a duckdns C2 host, the installer-side impact is clear.

Affected versions

0.0.2

References

https://pypi.org/project/kaggle-runner/0.0.2/

Updated May 13, 2026 · Source: OSV.dev

Insights

Releases per month

last 12 months

Release mix

minor 2
patch 14

17 releases

Dependencies over time

per release

Release calendar

2020

Jan

Feb

Mar

Apr

May

Jun

Jul

Aug

Sep

Oct

Nov

Dec

Less More