Skip to content
supplychainattack.orgSupply chain attack incident catalog

2025 06 Sorex supply chain incidents

1 confirmed incident publicly associated with this group. Attribution reflects what the cited sources state; it is recorded for filtering, not asserted by this site.

  1. resolvedcritical

    Malicious code in zamino (PyPI)

    The PyPI package zamino was identified as malicious code—a clone of legitimate Aminoapps libraries with added credential exfiltration functionality. The package was part of the 2025-06-sorex campaign and has been cataloged by the OpenSSF malicious packages database.

    2025 06 SorexPyPICompromised packageTyposquatting