Malicious code in nvtorch-oot-nightly (PyPI)
The PyPI package nvtorch-oot-nightly contained malicious code that exfiltrates basic host information (IP address, username) during installation. The package overrides the install command in setup.py to execute the malicious payload.
- Disclosed
- Last updated
- Blast radius
- Users who installed nvtorch-oot-nightly from PyPI
- Ecosystems
- Attack vectors
- Affected entities
- nvtorch-oot-nightlyPyPI package containing malicious code
The nvtorch-oot-nightly package published on PyPI contained malicious code designed to exfiltrate basic system information from the host upon installation or module import. The malicious payload was executed by overriding the install command in setup.py.\n\nThe package was identified as part of a generic PyPI pentest campaign (GENERIC-standard-pypi-install-kits) and classified as having limited harm potential due to the nature of the data exfiltration (basic host information only). The malicious code was discovered and attributed to source kam193.\n\nThe incident was documented by the OpenSSF malicious-packages project (MAL-2026-11425) and published as GitHub Advisory GHSA-5g9f-m99h-h89p on August 1, 2026."
Indicators of compromise
- Packages
- nvtorch-oot-nightly
Remediation
- Uninstall nvtorch-oot-nightly immediately if installed
- Review system logs for suspicious network activity or data exfiltration following installation
- Audit systems where the package was installed for unauthorized access or credential compromise
- Use only official or verified packages from trusted sources
- Monitor PyPI for similar malicious packages using security scanning tools
Sources
- GitHub Advisory GHSA-5g9f-m99h-h89p · GitHub Advisory Database
Cite this entry
"Malicious code in nvtorch-oot-nightly (PyPI)." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed August 1, 2026; last updated August 1, 2026. https://supplychainattack.org/incident/malicious-code-in-nvtorch-oot-nightly-pypi-4ssmvm
Suggest a correction
Found an error or have a newer source? Corrections to factual errors take priority over new entries.
Related incidents
- resolvedhigh
Malicious code in asdk-plugin-legacy (PyPI)
Malicious code was discovered in the asdk-plugin-legacy package on PyPI. The package exfiltrates basic host information (IP, username) upon installation or import, with no legitimate functionality.
PyPICompromised package - resolvedhigh
Malicious code in trtllm-subdir-test (PyPI)
The PyPI package trtllm-subdir-test contained malicious code that exfiltrates basic host information (IP address, username) during installation. The package overrides the install command in setup.py to execute the malicious payload.
PyPICompromised package - resolvedhigh
Malicious code in asdk-plugin-ai-platform (PyPI)
The PyPI package asdk-plugin-ai-platform contained malicious code that exfiltrates basic host information (IP, username) upon installation or module import. The package overrides the install command in setup.py to execute the malicious payload during installation.
PyPICompromised package - containedhigh
Malicious code in asdk-plugin-alphagen (PyPI)
Malicious code was published in the asdk-plugin-alphagen package on PyPI (version 9999.0.0). The package exfiltrates basic host information (IP, username) during installation and communicates with a domain associated with malicious activity.
PyPICompromised package