Skip to content
supplychainattack.orgSupply chain attack incident catalog
resolvedcritical

Malicious code in abilityrequests (PyPI)

Malicious code was discovered in the abilityrequests package on PyPI. The package was identified by the OpenSSF malicious-packages project as containing malicious code.

ShareXLinkedInHacker News
Disclosed
Last updated
Blast radius
Unknown; depends on adoption of affected versions
Ecosystems
Attack vectors
Affected entities
  • abilityrequestsPyPI package

The abilityrequests package on PyPI was found to contain malicious code. The discovery was credited to the OpenSSF's malicious-packages project, which maintains a catalog of known malicious packages in open-source ecosystems.\n\nThe malicious package was identified with reference MAL-2025-41615 in the OpenSSF's malicious-packages repository. The incident was disclosed on 2026-07-21 via a GitHub Security Advisory (GHSA-7gch-jfgj-c5p9).\n\nUsers who installed affected versions of abilityrequests are at risk of executing arbitrary malicious code on their systems.

Indicators of compromise

Packages
  • abilityrequests

Remediation

  • Remove the abilityrequests package from affected environments
  • Audit systems where abilityrequests was installed for signs of compromise
  • Review package dependencies to identify any reliance on abilityrequests
  • Use only verified, trusted versions of the package if it is needed
  • Monitor PyPI and security advisories for updates on this incident

Sources

  1. GitHub Advisory GHSA-7gch-jfgj-c5p9 · GitHub Advisory Database

Cite this entry

"Malicious code in abilityrequests (PyPI)." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed July 21, 2026; last updated July 21, 2026. https://supplychainattack.org/incident/malicious-code-in-abilityrequests-pypi-l8ayzc

Suggest a correction

Found an error or have a newer source? Corrections to factual errors take priority over new entries.

  1. resolvedcritical

    Malicious code in vtranalytic (PyPI)

    The vtranalytic package on PyPI contained malicious code implementing a Telegram-bot-driven remote administration tool that provides full system control to an attacker holding the configured bot token. The package exfiltrates credentials, SSH keys, and arbitrary files via Telegram API, and executes arbitrary shell commands through a documented `run` command.

    PyPICompromised packageMalicious maintainer
  2. containedcritical

    Malicious code in govapkg (PyPI)

    govapkg, a malicious PyPI package, downloads and executes a hidden binary on first use, establishing persistence via a systemd desktop autostart entry. The package obfuscates its malicious behavior through base64-encoded URLs and downloads from unverified external sources.

    PyPICompromised packageMalicious commit
  3. containedcritical

    Malicious code in dev-helper-bg (PyPI)

    The PyPI package dev-helper-bg contained malicious code that executed arbitrary commands on import. The package decrypted and executed remotely-controlled code fetched from an external endpoint, and spawned a Telegram bot for command and control.

    2026 07 Make HelperPyPICompromised packageMalicious commit
  4. containedcritical

    Malicious code in karpatkit (PyPI)

    The karpatkit package on PyPI contained malicious code that exfiltrated sensitive credentials and secrets on import. The package spawned a daemon thread collecting environment variables, cloud credentials, SSH keys, Kubernetes tokens, cryptocurrency wallets, and shell histories, then transmitted them via HTTP to hardcoded IP addresses.

    PyPICompromised packageMalicious commit