Malicious code in neutrl-contracts (PyPI)

The neutrl-contracts package on PyPI was found to intentionally depend on a malicious package as part of a coordinated supply chain attack campaign (2026-08-neutrl-core). The malicious code is embedded in the dependency package neutrl-core and disguised as telemetry functionality.\n\nThe attack is designed to exfiltrate sensitive credentials including environment variables, SSH keys, dotenv files, and other sensitive data. The malicious code includes remote command execution capabilities controlled by an attacker-operated endpoint. The attacker ensures their malicious endpoint is always included in the configuration, even if users attempt to provide their own blockchain endpoints.\n\nAnalyzed versions of the dependent packages did not actively use the malicious code but were clearly prepared for activation as part of the attack campaign. The incident was identified and credited to the OpenSSF's malicious-packages repository.