bip39-py @1.0.6
Vulnerability report · Last retrieved from osv.dev August 5, 2026 at 5:03 PM UTC
OSV ID
MAL-2026-12080
Ecosystem
pypi
Summary
During installation, the package exfiltrates sensitive env variables, browser data, crypto wallets files, ssh keys and other configuration files. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-08-bip39-py Reasons (based on the campaign): - crypto-related - The package overrides the install command in setup.py to execute malicious code during installation. - exfiltration-crypto - exfiltration-browser-data - exfiltration-env-variables - exfiltration-ssh-keys - exfiltration-credentials - uses-telegram-bot
Source: kam193 (c188f84ee0ad8238ed89a94673968e9f17c44d91d25dfe8012efd39e01705081)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.