defi-sdk-py @2.5.1
Vulnerability report · Last retrieved from osv.dev August 6, 2026 at 1:06 AM UTC
OSV ID
MAL-2026-13361
Ecosystem
pypi
Summary
During installation, the package exfiltrates sensitive env variables, browser data, crypto wallets files, ssh keys and other configuration files. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-08-bip39-py Reasons (based on the campaign): - crypto-related - The package overrides the install command in setup.py to execute malicious code during installation. - exfiltration-crypto - exfiltration-browser-data - exfiltration-env-variables - exfiltration-ssh-keys - exfiltration-credentials - uses-telegram-bot
Source: kam193 (b292686db581afeaaa7d53e2281a90d7d470fc71ab9e7d6156c49e2e99a44a30)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.