Malicious code in ai-perf-toolkit (PyPI)
The PyPI package ai-perf-toolkit contained malicious code that initiates cryptomining for a hardcoded wallet upon import. The malicious campaign was identified and attributed to OpenSSF's malicious-packages repository.
- Disclosed
- Last updated
- Blast radius
- All users who installed ai-perf-toolkit from PyPI during the malicious distribution period.
- Ecosystems
- Attack vectors
- Affected entities
- ai-perf-toolkitPyPI package containing malicious cryptomining code
The ai-perf-toolkit package distributed via PyPI contained embedded malicious code designed to perform cryptomining. Upon import of the package, the code automatically initiates mining operations for a hardcoded cryptocurrency wallet, provided that mining software is already installed on the system.\n\nThe malicious activity was identified and cataloged as part of the 2026-07-ai-perf-toolkit campaign. The package was flagged as containing clearly malicious intent, specifically cryptomining functionality.\n\nThe incident was credited to the OpenSSF's malicious-packages repository, which tracks and documents confirmed malicious packages in public package ecosystems. The malicious code was identified with the hash 41d25387636c9b0b89a404304d079c30ad28bda33bb551e551cb9e15a75c00ba.
Indicators of compromise
- Packages
- ai-perf-toolkit
Remediation
- Immediately uninstall ai-perf-toolkit from all systems where it was installed
- Audit system logs and process activity for evidence of unauthorized cryptomining
- Check for presence of mining software or related tools that may have been installed alongside the package
- Review wallet addresses and cryptocurrency transaction logs if mining occurred
- Update package management tools and enable security scanning for malicious packages
- Monitor systems for any persistence mechanisms or additional malicious artifacts left by the package
Sources
- GitHub Advisory GHSA-9p9m-j35v-j8cp · GitHub Advisory Database
Cite this entry
"Malicious code in ai-perf-toolkit (PyPI)." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed July 30, 2026; last updated July 30, 2026. https://supplychainattack.org/incident/malicious-code-in-ai-perf-toolkit-pypi-ahzfj7
Suggest a correction
Found an error or have a newer source? Corrections to factual errors take priority over new entries.
Related incidents
- containedcritical
Malicious code in mcp-search-server (PyPI)
mcp-search-server on PyPI contained malicious code in versions published from July 2026 onward. The package included hidden "phone home" functionality disguised as a "share compute swarm" feature, and was part of a coordinated campaign with another malicious package designed to deploy coin miners on user machines.
PyPICompromised packageMalicious maintainer - resolvedhigh
Malicious code in phabricator-client (PyPI)
The phabricator-client package on PyPI contained malicious code that exfiltrates basic host information (IP address, username) during installation. The package overrides the install command in setup.py to execute the malicious payload.
PyPICompromised package - resolvedcritical
Malicious code in cfgzen (PyPI)
Malicious code was discovered in the cfgzen PyPI package, embedded in a native module that functions as an infostealer. The malicious code downloads and executes an encrypted remote executable, with capabilities to exfiltrate environment variables and detect sandbox environments. The package has been identified as part of campaign 2026-07-cfgzen.
2026 07 CfgzenPyPICompromised package - resolvedcritical
Malicious code in vtranalytic (PyPI)
The vtranalytic package on PyPI contained malicious code implementing a Telegram-bot-driven remote administration tool that provides full system control to an attacker holding the configured bot token. The package exfiltrates credentials, SSH keys, and arbitrary files via Telegram API, and executes arbitrary shell commands through a documented `run` command.
PyPICompromised packageMalicious maintainer