Malicious code in btcflx (PyPI)
The btcflx package on PyPI contained malicious code that exfiltrates cryptocurrency wallet files upon import. The package was part of the 2026-08-kotanku campaign and has been identified and reported by the OpenSSF.
- Disclosed
- Last updated
- Blast radius
- Unknown; depends on installation count and user systems affected.
- Ecosystems
- Attack vectors
- Threat actor
- Affected entities
- btcflxMalicious package on PyPI
The btcflx package published on PyPI contained malicious code designed to exfiltrate cryptocurrency wallet files. The malicious behavior was triggered during package import, making it active as soon as the package was installed and imported into a Python environment.\n\nThe package was identified as part of the 2026-08-kotanku malicious campaign, which targets cryptocurrency assets. The malicious code used Telegram bot infrastructure for command and control or data exfiltration.\n\nThe incident was discovered and reported by the OpenSSF's malicious-packages project, which maintains a catalog of confirmed malicious packages across package ecosystems.
Indicators of compromise
- Packages
- btcflx
Remediation
- Immediately uninstall the btcflx package from all systems: pip uninstall btcflx
- Audit systems where btcflx was installed for signs of compromise, particularly cryptocurrency wallet files
- Check for unauthorized access to cryptocurrency wallets and consider moving assets if compromise is suspected
- Review Python package installation logs to identify affected systems and users
- Monitor for suspicious network connections to Telegram bot infrastructure from affected systems
Sources
- GitHub Advisory GHSA-wvgr-r9rh-2fqv · GitHub Advisory Database
Cite this entry
"Malicious code in btcflx (PyPI)." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed August 10, 2026; last updated August 10, 2026. https://supplychainattack.org/incident/malicious-code-in-btcflx-pypi-m04tpp
Suggest a correction
Found an error or have a newer source? Corrections to factual errors take priority over new entries.
Related incidents
- resolvedhigh
Malicious code in kb-ai (PyPI)
The kb-ai package on PyPI contained malicious code designed to demonstrate a dependency confusion attack. The package exfiltrated basic system data (IP address, username) and executed arbitrary code during installation via setup.py override.
PyPICompromised packageDependency confusion - resolvedcritical
Malicious code in @years19/n8n-nodes-utils-helper-b (npm)
The npm package @years19/n8n-nodes-utils-helper-b contained malicious code disguised as an n8n workflow utility. The postinstall hook executed reconnaissance, downloaded and extracted a Python tarball with TLS verification disabled, and exfiltrated system information to an attacker-controlled domain.
npmPyPICompromised package - resolvedcritical
Malicious code in @years19/n8n-nodes-utils-helper-c (npm)
The npm package @years19/n8n-nodes-utils-helper-c contained a malicious postinstall script that downloads a trojanized Python multidict module from an attacker-controlled server and injects it into the system's Python site-packages directory, enabling arbitrary code execution on any subsequent Python invocation.
npmPyPICompromised packageMalicious commit - containedcritical
Malicious code in @years19/n8n-nodes-utils-helper-d (npm)
The npm package @years19/n8n-nodes-utils-helper-d contained malicious code that downloads and executes a Python DDoS/offensive-tooling dropper on installation. The package impersonates a legitimate n8n community node but performs unauthorized system reconnaissance and beacons host identity to an attacker-controlled endpoint.
npmPyPICompromised packageTyposquatting