solana-sniper-bot @1.4.2
Vulnerability report · Last retrieved from osv.dev August 6, 2026 at 1:06 AM UTC
OSV ID
MAL-2026-13373
Ecosystem
pypi
Summary
During installation, the package exfiltrates sensitive env variables, browser data, crypto wallets files, ssh keys and other configuration files. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-08-bip39-py Reasons (based on the campaign): - crypto-related - The package overrides the install command in setup.py to execute malicious code during installation. - exfiltration-crypto - exfiltration-browser-data - exfiltration-env-variables - exfiltration-ssh-keys - exfiltration-credentials - uses-telegram-bot
Source: kam193 (1140920c05a1ce00ca8d35295fb927d1bbb2ca9fe2f8e7ab9f63f9391ca6476b)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.