Malicious code in alphalend-layouts (PyPI)
The PyPI package alphalend-layouts contained malicious code that harvested Sui keystores, private keys, and environment secrets from installer systems and uploaded them to an attacker-controlled GitHub repository. The attack was triggered both during installation and on first import, with credentials deliberately obfuscated to evade detection.
- Disclosed
- Last updated
- Blast radius
- All users who installed alphalend-layouts from PyPI during the malicious window; any system with Sui keystores, private keys, or .env files containing secrets.
- Ecosystems
- Attack vectors
- Affected entities
- alphalend-layoutsPyPI package containing malicious code that harvests and exfiltrates secrets
The alphalend-layouts package published to PyPI contained intentional malicious code designed to exfiltrate sensitive credentials from systems where it was installed. The package's stated purpose was a BCS layouts library, but it included hidden functionality to harvest secrets.\n\nThe malicious behavior was triggered in two ways: during the pip install process via custom install/develop cmdclass subclasses in setup.py, and when the package was first imported via code in __init__.py. The attack collected files including ~/.sui/sui.keystore, Sui configuration files, and .env* files containing markers like SUI_, PK_B64, and PRIVATE_KEY.\n\nCollected files were archived and uploaded via HTTP PUT to https://api.github.com/repos/futongwan/sui-research-notes/contents/fingerprints/ using a GitHub personal access token. The token was deliberately split across multiple locations—base64-encoded fragments hidden in fake checksum fields within data/v4.json and a constant in _compat.py—as an evasion technique against automated secret scanners.\n\nThe package was identified by Amazon Inspector and reported via GitHub Security Advisory GHSA-q799-9mw8-2wv3.
Indicators of compromise
- Packages
- alphalend-layouts
- Domains
- api.github.com
Remediation
- Immediately uninstall alphalend-layouts from all systems
- Revoke any Sui private keys or GitHub tokens that may have been exposed
- Rotate credentials for any accounts referenced in .env files on affected systems
- Review PyPI package installation logs to identify when alphalend-layouts was installed
- Scan systems for the presence of alphalend-layouts in pip freeze or requirements.txt outputs
- Monitor the attacker-controlled GitHub repository (futongwan/sui-research-notes) for any uploaded credential archives
- Use a package manager with integrity verification and consider pinning dependencies to known-good versions
Sources
- GitHub Advisory GHSA-q799-9mw8-2wv3 · GitHub Advisory Database
Cite this entry
"Malicious code in alphalend-layouts (PyPI)." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed August 7, 2026; last updated August 7, 2026. https://supplychainattack.org/incident/malicious-code-in-alphalend-layouts-pypi-15ne93
Suggest a correction
Found an error or have a newer source? Corrections to factual errors take priority over new entries.
Related incidents
- resolvedcritical
Malicious code in @years19/n8n-nodes-utils-helper-c (npm)
The npm package @years19/n8n-nodes-utils-helper-c contained a malicious postinstall script that downloads a trojanized Python multidict module from an attacker-controlled server and injects it into the system's Python site-packages directory, enabling arbitrary code execution on any subsequent Python invocation.
npmPyPICompromised packageMalicious commit - containedcritical
Malicious code in neutrl-core (PyPI)
Malicious code was discovered in the neutrl-core PyPI package designed to exfiltrate sensitive credentials including environment variables, SSH keys, and dotenv files. The malicious functionality was hidden in a function disguised as telemetry and activated via commands from an attacker-controlled endpoint. The attack campaign involved a fake GitHub account with backdated commits to establish false credibility.
PyPICompromised packageMalicious commit - containedcritical
Malicious code in aiassistcore (PyPI)
Multiple malicious PyPI packages (aiassistcore, cognikit, aichannel) were discovered containing infostealer functionality, cryptocurrency wallet address replacement, browser data exfiltration, and remote access capabilities. The campaign, attributed to North Korean threat actors, uses these packages as dependencies in malicious interview assessments and cryptocurrency projects.
Contagious InterviewPyPICompromised packageMalicious commit - containedcritical
Malicious code in catalogai (PyPI)
Multiple malicious Python packages (catalogai, cognikit, aiassistcore, aichannel) were published to PyPI as part of a coordinated campaign. The packages contain infostealer malware with capabilities including cryptocurrency wallet address replacement, browser data exfiltration, remote access, and malicious browser extension installation, attributed to North Korea's "Contagious Interview" campaign.
Contagious InterviewPyPICompromised packageMalicious commit