Malicious code in dlmm (PyPI)
The dlmm package on PyPI contained malicious code that exfiltrates basic host information (IP address, username) during installation. The package overrides the install command in setup.py to execute the malicious payload when installed.
- Disclosed
- Last updated
- Blast radius
- All users who installed the dlmm package from PyPI
- Ecosystems
- Attack vectors
- Affected entities
- dlmmPyPI package containing malicious code
The dlmm package published on PyPI was found to contain malicious code designed to exfiltrate basic system information from the host machine. The malicious payload is executed during package installation by overriding the install command in setup.py.\n\nThe exfiltrated data includes basic host information such as IP address and username. According to the OpenSSF malicious packages database, this package had no legitimate functionality beyond the data exfiltration.\n\nThe incident was classified as a low-harm pentest-style package under the GENERIC-standard-pypi-install-pentest campaign, indicating it was likely a proof-of-concept or research demonstration rather than a sophisticated attack.\n\nThe package has been identified and documented in the OpenSSF malicious packages repository (MAL-2026-13728).
Indicators of compromise
- Packages
- dlmm
Remediation
- Remove the dlmm package from any systems where it was installed
- Audit systems that installed dlmm for signs of compromise or data exfiltration
- Review network logs for suspicious outbound connections from affected systems
- Change credentials (passwords, API keys) on any systems that may have been compromised
- Monitor for any unauthorized access or activity on affected systems
Sources
- GitHub Advisory GHSA-5gh8-34vp-xw63 · GitHub Advisory Database
Cite this entry
"Malicious code in dlmm (PyPI)." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed August 11, 2026; last updated August 11, 2026. https://supplychainattack.org/incident/malicious-code-in-dlmm-pypi-1i8ede
Suggest a correction
Found an error or have a newer source? Corrections to factual errors take priority over new entries.
Related incidents
- resolvedhigh
Malicious code in kb-ai (PyPI)
The kb-ai package on PyPI contained malicious code designed to demonstrate a dependency confusion attack. The package exfiltrated basic system data (IP address, username) and executed arbitrary code during installation via setup.py override.
PyPICompromised packageDependency confusion - resolvedcritical
Malicious code in @years19/n8n-nodes-utils-helper-b (npm)
The npm package @years19/n8n-nodes-utils-helper-b contained malicious code disguised as an n8n workflow utility. The postinstall hook executed reconnaissance, downloaded and extracted a Python tarball with TLS verification disabled, and exfiltrated system information to an attacker-controlled domain.
npmPyPICompromised package - resolvedcritical
Malicious code in @years19/n8n-nodes-utils-helper-c (npm)
The npm package @years19/n8n-nodes-utils-helper-c contained a malicious postinstall script that downloads a trojanized Python multidict module from an attacker-controlled server and injects it into the system's Python site-packages directory, enabling arbitrary code execution on any subsequent Python invocation.
npmPyPICompromised packageMalicious commit - containedcritical
Malicious code in @years19/n8n-nodes-utils-helper-d (npm)
The npm package @years19/n8n-nodes-utils-helper-d contained malicious code that downloads and executes a Python DDoS/offensive-tooling dropper on installation. The package impersonates a legitimate n8n community node but performs unauthorized system reconnaissance and beacons host identity to an attacker-controlled endpoint.
npmPyPICompromised packageTyposquatting