Malicious code in nvtorch-oot-nightly (PyPI)
The PyPI package nvtorch-oot-nightly contained malicious code that exfiltrates basic host information (IP address, username) during installation. The package overrides the install command in setup.py to execute the malicious payload.
- Disclosed
- Last updated
- Blast radius
- Users who installed nvtorch-oot-nightly from PyPI
- Ecosystems
- Attack vectors
- Affected entities
- nvtorch-oot-nightlyPyPI package containing malicious code
The nvtorch-oot-nightly package published on PyPI contained malicious code designed to exfiltrate basic system information from the host upon installation or module import. The malicious payload was executed by overriding the install command in setup.py.\n\nThe package was identified as part of a generic PyPI pentest campaign (GENERIC-standard-pypi-install-kits) and classified as having limited harm potential due to the nature of the data exfiltration (basic host information only). The malicious code was discovered and attributed to source kam193.\n\nThe incident was documented by the OpenSSF malicious-packages project (MAL-2026-11425) and published as GitHub Advisory GHSA-5g9f-m99h-h89p on August 1, 2026."
Indicators of compromise
- Packages
- nvtorch-oot-nightly
Remediation
- Uninstall nvtorch-oot-nightly immediately if installed
- Review system logs for suspicious network activity or data exfiltration following installation
- Audit systems where the package was installed for unauthorized access or credential compromise
- Use only official or verified packages from trusted sources
- Monitor PyPI for similar malicious packages using security scanning tools
Sources
- GitHub Advisory GHSA-5g9f-m99h-h89p · GitHub Advisory Database
Cite this entry
"Malicious code in nvtorch-oot-nightly (PyPI)." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed August 1, 2026; last updated August 1, 2026. https://supplychainattack.org/incident/malicious-code-in-nvtorch-oot-nightly-pypi-4ssmvm
Suggest a correction
Found an error or have a newer source? Corrections to factual errors take priority over new entries.
Related incidents
- resolvedhigh
Malicious code in cubesat-upstream-driver (PyPI)
Malicious code was published to PyPI in the cubesat-upstream-driver package, capable of collecting environment variables. The package was detected as part of a CTF-like exercise or pentest campaign and does not appear to exfiltrate data autonomously.
PyPICompromised packageDependency confusion - resolvedhigh
Malicious code in riakcs (PyPI)
The riakcs package on PyPI contained malicious code that exfiltrates basic host information (IP address, username) during installation. The package overrides the install command in setup.py to execute the malicious payload when installed.
PyPICompromised package - containedcritical
Malicious code in fastapii (PyPI)
The fastapii package on PyPI is a typosquatting attack imitating the popular FastAPI library. During installation, it executes obfuscated code that downloads and runs a malicious executable, exfiltrating cryptocurrency wallet data and potentially other sensitive information.
2026 08 FlasqPyPITyposquattingCompromised package - containedcritical
Malicious code in idnna (PyPI)
A malicious package named idnna was published to PyPI, imitating a legitimate library. During installation, the package executes obfuscated code that downloads and runs a malicious executable, exfiltrating cryptocurrency wallet data and potentially other sensitive information.
PyPITyposquattingCompromised package