Malicious code in morpho-sdk (PyPI)
The morpho-sdk package on PyPI contained malicious code that exfiltrates basic host information (IP address, username) during installation. The package overrides the install command in setup.py to execute the malicious payload when installed.
- Disclosed
- Last updated
- Blast radius
- PyPI users who installed morpho-sdk
- Ecosystems
- Attack vectors
- Affected entities
- morpho-sdkPyPI package containing malicious code
The morpho-sdk package published on PyPI was found to contain malicious code designed to exfiltrate basic system information from the host machine. The malicious payload is executed during package installation by overriding the install command in setup.py.\n\nThe exfiltrated data includes basic host information such as IP address and username. According to the OpenSSF malicious packages database, this package had no legitimate functionality beyond the data exfiltration behavior.\n\nThe incident was identified and cataloged as part of the OpenSSF's malicious packages tracking effort (MAL-2026-13731). The package was classified as a low-harm pentest-style package, though it still poses a risk to users who installed it during the window of availability.\n\nUsers who installed this package should assume their basic system information may have been exfiltrated and take appropriate security measures.
Indicators of compromise
- Packages
- morpho-sdk
- Hashes
- cb58dff63faa08e128ddd0d8d38b82c0711bb60d09d19755a8e8f398fa7d511d
Remediation
- Uninstall morpho-sdk immediately from all systems where it was installed
- Review system logs and network traffic for any suspicious outbound connections that may have occurred during or after installation
- Change credentials and review account activity for any systems where the package was installed
- Monitor for any unauthorized access or use of exfiltrated information (IP address, username)
- Verify the integrity of other installed packages and dependencies
Sources
- GitHub Advisory GHSA-jm5p-3rm5-v5gv · GitHub Advisory Database
Cite this entry
"Malicious code in morpho-sdk (PyPI)." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed August 11, 2026; last updated August 11, 2026. https://supplychainattack.org/incident/malicious-code-in-morpho-sdk-pypi-448764
Suggest a correction
Found an error or have a newer source? Corrections to factual errors take priority over new entries.
Related incidents
- containedcritical
Malicious code in deepface-weights (PyPI)
deepface-weights, a malicious package published to PyPI, contains code that exfiltrates Telegram session credentials on import. The package impersonates the legitimate deepface library but contains only credential-stealing functionality.
PyPICompromised package - resolvedcritical
Malicious code in reqcrypt (PyPI)
The reqcrypt PyPI package contains intentionally hidden malicious code that executes arbitrary Python code from attacker-controlled HTTP responses. The PayloadProcessor unconditionally inspects every HTTP response for specific JSON keys and passes base64/gzip/zlib-decoded values to exec(), enabling remote code execution on any system using the library.
PyPICompromised packageMalicious maintainer - resolvedcritical
Malicious code in deepface-weight (PyPI)
The PyPI package deepface-weight contained malicious code that exfiltrated Telegram session files on import, granting attackers full access to associated Telegram accounts. The package was a typosquat of the legitimate deepface ML library with no actual machine-learning functionality.
PyPICompromised package - resolvedcritical
Malicious code in socks5901 (PyPI)
The PyPI package socks5901 contained malicious code that exfiltrates files from /sdcard/ during import and communicates via Telegram bot. The package was identified and cataloged by the OpenSSF malicious-packages project.
PyPICompromised package