Malicious code in kotoraka (PyPI)
The kotoraka package on PyPI contained malicious code that exfiltrates cryptocurrency wallet files during import. The package was part of a coordinated malicious campaign (2026-08-kotanku) and has been identified and cataloged by the OpenSSF.
- Disclosed
- Last updated
- Blast radius
- Any user who installed and imported the kotoraka package would have their cryptocurrency wallet files exfiltrated.
- Ecosystems
- Attack vectors
- Threat actor
- Affected entities
- kotorakaPyPI package containing malicious code that exfiltrates cryptocurrency wallet files on import
The kotoraka package published on PyPI contained malicious code designed to exfiltrate cryptocurrency wallet files when the package is imported. This represents a direct supply chain attack targeting users who installed the compromised package.\n\nThe malicious behavior was identified as part of a broader campaign (2026-08-kotanku) with clear intent to steal cryptocurrency assets. The package communicated with a Telegram bot for command and control purposes.\n\nThe incident was discovered and documented by the OpenSSF's malicious-packages project, which tracks confirmed malicious packages across major package repositories. The malicious code hash is e9ba78f7ee9a259fc6e518295fe3d0217c83808bbdf0fff2107883cb3cf50b3c.
Indicators of compromise
- Packages
- kotoraka
- Hashes
- e9ba78f7ee9a259fc6e518295fe3d0217c83808bbdf0fff2107883cb3cf50b3c
Remediation
- Immediately uninstall the kotoraka package from any affected systems
- Audit systems where kotoraka was installed for signs of cryptocurrency wallet access or exfiltration
- Rotate cryptocurrency wallet credentials and consider moving assets to new wallets
- Check for any unauthorized Telegram bot communications or network connections to suspicious domains
- Review package dependencies to ensure no other malicious packages were installed as transitive dependencies
Sources
- GitHub Advisory GHSA-hmfw-wq6f-f2ph · GitHub Advisory Database
Cite this entry
"Malicious code in kotoraka (PyPI)." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed August 10, 2026; last updated August 10, 2026. https://supplychainattack.org/incident/malicious-code-in-kotoraka-pypi-1j5le7
Suggest a correction
Found an error or have a newer source? Corrections to factual errors take priority over new entries.
Related incidents
- resolvedcritical
Malicious code in reqcrypt-dev (PyPI)
The PyPI package reqcrypt-dev contained malicious code implementing a hidden backdoor. The package masqueraded as an HTTP request library but secretly monitored responses for specific fields and executed their content without user knowledge.
PyPICompromised package - resolvedcritical
Malicious code in deepface-weight (PyPI)
The PyPI package deepface-weight contained malicious code that exfiltrated Telegram session files on import, granting attackers full access to associated Telegram accounts. The package was a typosquat of the legitimate deepface ML library with no actual machine-learning functionality.
PyPICompromised package - resolvedcritical
Malicious code in reqcrypt (PyPI)
The reqcrypt PyPI package contains intentionally hidden malicious code that executes arbitrary Python code from attacker-controlled HTTP responses. The PayloadProcessor unconditionally inspects every HTTP response for specific JSON keys and passes base64/gzip/zlib-decoded values to exec(), enabling remote code execution on any system using the library.
PyPICompromised packageMalicious maintainer - containedcritical
Malicious code in deepface-weights (PyPI)
deepface-weights, a malicious package published to PyPI, contains code that exfiltrates Telegram session credentials on import. The package impersonates the legitimate deepface library but contains only credential-stealing functionality.
PyPICompromised package