Skip to content
supplychainattack.orgSupply chain attack incident catalog
containedcritical

Malicious code in solana-sniper-bot (PyPI)

The solana-sniper-bot package on PyPI contained malicious code that exfiltrated sensitive data during installation, including environment variables, browser data, cryptocurrency wallet files, SSH keys, and configuration files. The malicious behavior was executed via a custom install command in setup.py.

ShareXLinkedInHacker News
Disclosed
Last updated
Blast radius
All users who installed solana-sniper-bot from PyPI during the malicious distribution period.
Ecosystems
PyPI
Attack vectors
Compromised package
Affected entities
  • solana-sniper-botMalicious package on PyPI

The solana-sniper-bot package distributed on PyPI contained malicious code designed to steal sensitive information from infected systems. During package installation, the malware would exfiltrate environment variables, browser data, cryptocurrency wallet files, SSH keys, and other configuration files.\n\nThe attack was implemented by overriding the install command in setup.py to execute malicious code as part of the installation process. This allowed the attacker to run arbitrary code with the privileges of the installing user.\n\nThe malicious package was part of a broader campaign (2026-08-bip39-py) targeting cryptocurrency-related Python packages. The stolen data was exfiltrated via a Telegram bot, indicating coordination with an attacker-controlled command and control infrastructure.\n\nThe incident was identified and documented by the OpenSSF's malicious-packages project, which tracks confirmed malicious packages across package repositories.

Indicators of compromise

Packages
  • solana-sniper-bot

Remediation

  • Immediately uninstall solana-sniper-bot from all systems where it was installed
  • Rotate all SSH keys, API credentials, and authentication tokens that may have been exposed
  • Change passwords for all accounts, particularly cryptocurrency exchange and wallet accounts
  • Scan systems for signs of compromise and monitor for unauthorized access
  • Review browser history and installed extensions for signs of compromise
  • Check cryptocurrency wallets for unauthorized transactions
  • Monitor environment variables and configuration files for unauthorized modifications
  • Consider the system compromised and perform a full security audit

Sources

  1. GitHub Advisory GHSA-xhcm-3f4q-mvrg · GitHub Advisory Database

Cite this entry

"Malicious code in solana-sniper-bot (PyPI)." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed August 5, 2026; last updated August 5, 2026. https://supplychainattack.org/incident/malicious-code-in-solana-sniper-bot-pypi-a1nij3

Suggest a correction

Found an error or have a newer source? Corrections to factual errors take priority over new entries.

Related incidents

  1. resolvedcritical

    Malicious code in @years19/n8n-nodes-utils-helper-c (npm)

    The npm package @years19/n8n-nodes-utils-helper-c contained a malicious postinstall script that downloads a trojanized Python multidict module from an attacker-controlled server and injects it into the system's Python site-packages directory, enabling arbitrary code execution on any subsequent Python invocation.

    npmPyPICompromised packageMalicious commit
  2. containedcritical

    Malicious code in @years19/n8n-nodes-utils-helper-d (npm)

    The npm package @years19/n8n-nodes-utils-helper-d contained malicious code that downloads and executes a Python DDoS/offensive-tooling dropper on installation. The package impersonates a legitimate n8n community node but performs unauthorized system reconnaissance and beacons host identity to an attacker-controlled endpoint.

    npmPyPICompromised packageTyposquatting
  3. resolvedcritical

    Malicious code in @years18/n8n-nodes-utils-helper-y (npm)

    The npm package @years18/n8n-nodes-utils-helper-y contained malicious code in its postinstall hook that downloads and executes attacker-controlled Python toolkits (mhddos, pyroxy-full, impacket), persists them in the user's Python site-packages, and exfiltrates host information to an attacker-controlled endpoint. Installation triggers immediate code execution and establishes persistence.

    npmPyPICompromised package
  4. resolvedcritical

    Malicious code in @years19/n8n-nodes-utils-helper-b (npm)

    The npm package @years19/n8n-nodes-utils-helper-b contained malicious code disguised as an n8n workflow utility. The postinstall hook executed reconnaissance, downloaded and extracted a Python tarball with TLS verification disabled, and exfiltrated system information to an attacker-controlled domain.

    npmPyPICompromised package