Malicious code in asdk-plugin-legacy (PyPI)
Malicious code was discovered in the asdk-plugin-legacy package on PyPI. The package exfiltrates basic host information (IP, username) upon installation or import, with no legitimate functionality.
- Disclosed
- Last updated
- Blast radius
- Unknown; depends on adoption of asdk-plugin-legacy package
- Ecosystems
- Attack vectors
- Affected entities
- asdk-plugin-legacyPyPI package
The asdk-plugin-legacy package published on PyPI contained malicious code designed to exfiltrate basic system information including IP address and username. The package has no legitimate purpose beyond this data collection.\n\nThe malicious behavior is triggered during installation through a custom setup.py install command override, meaning the code executes automatically when the package is installed. This is a typical low-harm reconnaissance technique often associated with pentest or research activities.\n\nThe package was identified and cataloged by the OpenSSF malicious-packages project (MAL-2026-11423). The incident was disclosed on 2026-08-01 via GitHub Security Advisory GHSA-6h9x-rrwg-j3wg."
Indicators of compromise
- Packages
- asdk-plugin-legacy
Remediation
- Remove asdk-plugin-legacy from all systems where it was installed
- Audit systems that installed this package for unauthorized access or data exfiltration
- Review PyPI package dependencies to identify if asdk-plugin-legacy was pulled in as a transitive dependency
- Monitor affected systems for suspicious outbound connections or data exfiltration
- Use package verification tools to scan for similar malicious packages in your environment
Sources
- GitHub Advisory GHSA-6h9x-rrwg-j3wg · GitHub Advisory Database
Cite this entry
"Malicious code in asdk-plugin-legacy (PyPI)." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed August 1, 2026; last updated August 1, 2026. https://supplychainattack.org/incident/malicious-code-in-asdk-plugin-legacy-pypi-cucipt
Suggest a correction
Found an error or have a newer source? Corrections to factual errors take priority over new entries.
Related incidents
- resolvedhigh
Malicious code in asdk-plugin-ai-platform (PyPI)
The PyPI package asdk-plugin-ai-platform contained malicious code that exfiltrates basic host information (IP, username) upon installation or module import. The package overrides the install command in setup.py to execute the malicious payload during installation.
PyPICompromised package - containedhigh
Malicious code in asdk-plugin-alphagen (PyPI)
Malicious code was published in the asdk-plugin-alphagen package on PyPI (version 9999.0.0). The package exfiltrates basic host information (IP, username) during installation and communicates with a domain associated with malicious activity.
PyPICompromised package - containedcritical
Malicious code in cognikit (PyPI)
Multiple malicious PyPI packages (cognikit, aiassistcore, aichannel) were discovered containing infostealer functionality, cryptocurrency wallet address replacement, browser data exfiltration, remote access capabilities, and malicious browser extensions. The campaign is attributed to North Korea's "Contagious Interview" operation and uses these packages as dependencies in malicious interview assessments and cryptocurrency projects.
Contagious InterviewPyPICompromised packageMalicious commit - containedcritical
Malicious code in aiprepkit (PyPI)
Multiple malicious Python packages (aiprepkit, cognikit, aiassistcore, aichannel) were published to PyPI as part of a coordinated campaign. The packages contain infostealer malware designed to replace cryptocurrency wallet addresses, exfiltrate browser data, establish remote control, and deploy malicious browser extensions, with IoCs consistent with North Korea's "Contagious Interview" campaign.
Contagious InterviewPyPICompromised packageMalicious commit