Malicious code in uncrypt (PyPI)
The uncrypt package on PyPI contained malicious code that silently executes an embedded executable upon import, harvesting browser data and system information (IP, username) and communicating with an external domain. The package included obfuscation and sandbox detection capabilities.
- Disclosed
- Last updated
- Blast radius
- PyPI package repository; users who installed uncrypt
- Ecosystems
- Attack vectors
- Affected entities
- uncryptPyPI package containing malicious code
The uncrypt package distributed via PyPI was found to contain malicious code that executes silently during package import without user disclosure. Dynamic analysis revealed the malware harvests browser data and exfiltrates basic system information including IP address and username to an external domain.\n\nThe malicious payload includes obfuscation techniques and sandbox detection logic to evade analysis and automated security environments. The campaign was identified as MAL-2026-13380 and credited to the OpenSSF malicious-packages project.\n\nThe package was classified as a clear infostealer with limited but confirmed exfiltration capabilities targeting browser data and system metadata. Users who imported the package during the active period were exposed to data harvesting.
Indicators of compromise
- Packages
- uncrypt
Remediation
- Immediately uninstall the uncrypt package from all systems
- Audit pip package installation logs to identify affected systems and users
- Assume compromise of browser data and system credentials on affected machines
- Change passwords and review browser history/stored credentials on affected systems
- Monitor for suspicious outbound network connections to the command-and-control domain
- Review PyPI package dependencies to ensure no other malicious packages are installed
- Implement package verification and scanning in CI/CD pipelines to detect malicious code before installation
Sources
- GitHub Advisory GHSA-qx28-hgj2-5h9g · GitHub Advisory Database
Cite this entry
"Malicious code in uncrypt (PyPI)." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed August 6, 2026; last updated August 6, 2026. https://supplychainattack.org/incident/malicious-code-in-uncrypt-pypi-teo9zi
Suggest a correction
Found an error or have a newer source? Corrections to factual errors take priority over new entries.
Related incidents
- containedcritical
Malicious code in deepface-weights (PyPI)
deepface-weights, a malicious package published to PyPI, contains code that exfiltrates Telegram session credentials on import. The package impersonates the legitimate deepface library but contains only credential-stealing functionality.
PyPICompromised package - resolvedcritical
Malicious code in reqcrypt (PyPI)
The reqcrypt PyPI package contains intentionally hidden malicious code that executes arbitrary Python code from attacker-controlled HTTP responses. The PayloadProcessor unconditionally inspects every HTTP response for specific JSON keys and passes base64/gzip/zlib-decoded values to exec(), enabling remote code execution on any system using the library.
PyPICompromised packageMalicious maintainer - resolvedcritical
Malicious code in deepface-weight (PyPI)
The PyPI package deepface-weight contained malicious code that exfiltrated Telegram session files on import, granting attackers full access to associated Telegram accounts. The package was a typosquat of the legitimate deepface ML library with no actual machine-learning functionality.
PyPICompromised package - resolvedcritical
Malicious code in socks5901 (PyPI)
The PyPI package socks5901 contained malicious code that exfiltrates files from /sdcard/ during import and communicates via Telegram bot. The package was identified and cataloged by the OpenSSF malicious-packages project.
PyPICompromised package