Malicious code in adv2099m5 (PyPI)
Malicious code was discovered in the adv2099m5 package on PyPI. The package contained intentional malicious functionality and has been cataloged by the OpenSSF malicious packages database.
- Disclosed
- Last updated
- Blast radius
- Unknown; depends on adoption of affected versions
- Ecosystems
- Attack vectors
- Affected entities
- adv2099m5
The adv2099m5 package on PyPI was found to contain malicious code. This incident was identified and documented by the OpenSSF's malicious packages project, which maintains a curated list of confirmed malicious packages across package ecosystems.\n\nThe malicious package was assigned identifier MAL-2024-4738 in the OpenSSF database. The package has been flagged as critical severity due to the presence of intentional malicious code.\n\nUsers who installed this package should remove it immediately and audit their systems for any unauthorized activity or data exfiltration that may have occurred.
Indicators of compromise
- Packages
- adv2099m5
Remediation
- Remove the adv2099m5 package from all affected systems immediately
- Audit system logs and network traffic for suspicious activity originating from the time of installation
- Review any credentials or sensitive data that may have been exposed
- Check PyPI and package management tools for any other suspicious packages with similar naming patterns
- Monitor systems for persistence mechanisms that may have been installed by the malicious package
Sources
- GitHub Advisory GHSA-fr8q-6fpj-jxmf · GitHub Advisory Database
Cite this entry
"Malicious code in adv2099m5 (PyPI)." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed July 21, 2026; last updated July 21, 2026. https://supplychainattack.org/incident/malicious-code-in-adv2099m5-pypi-1dqqrl
Suggest a correction
Found an error or have a newer source? Corrections to factual errors take priority over new entries.
Related incidents
- resolvedcritical
Malicious code in vtranalytic (PyPI)
The vtranalytic package on PyPI contained malicious code implementing a Telegram-bot-driven remote administration tool that provides full system control to an attacker holding the configured bot token. The package exfiltrates credentials, SSH keys, and arbitrary files via Telegram API, and executes arbitrary shell commands through a documented `run` command.
PyPICompromised packageMalicious maintainer - containedcritical
Malicious code in govapkg (PyPI)
govapkg, a malicious PyPI package, downloads and executes a hidden binary on first use, establishing persistence via a systemd desktop autostart entry. The package obfuscates its malicious behavior through base64-encoded URLs and downloads from unverified external sources.
PyPICompromised packageMalicious commit - containedcritical
Malicious code in dev-helper-bg (PyPI)
The PyPI package dev-helper-bg contained malicious code that executed arbitrary commands on import. The package decrypted and executed remotely-controlled code fetched from an external endpoint, and spawned a Telegram bot for command and control.
2026 07 Make HelperPyPICompromised packageMalicious commit - containedcritical
Malicious code in karpatkit (PyPI)
The karpatkit package on PyPI contained malicious code that exfiltrated sensitive credentials and secrets on import. The package spawned a daemon thread collecting environment variables, cloud credentials, SSH keys, Kubernetes tokens, cryptocurrency wallets, and shell histories, then transmitted them via HTTP to hardcoded IP addresses.
PyPICompromised packageMalicious commit