Skip to content
supplychainattack.orgSupply chain attack incident catalog
resolvedcritical

Malicious code in yelp-pkg (PyPI)

yelp-pkg, a malicious package on PyPI, was designed to exfiltrate sensitive data including environment variables during installation. The package overrides the install command in setup.py to execute malicious code and appears to be a typosquatting attack.

ShareXLinkedInHacker News
Disclosed
Last updated
Blast radius
All users who installed the malicious yelp-pkg package from PyPI
Ecosystems
PyPI
Attack vectors
Compromised packageTyposquatting
Affected entities
  • yelp-pkgMalicious package on PyPI

A malicious package named yelp-pkg was published on PyPI with the intent to steal sensitive information from affected systems. The package was identified by kam193 and credited to the OpenSSF's malicious-packages repository.

During installation, the package executes malicious code by overriding the install command in setup.py. Upon import, it attempts to exfiltrate potentially sensitive data, specifically environment variables and other generic data. This behavior is consistent with infostealer malware.

The package appears to be part of a typosquatting campaign (GENERIC-questionable-pentest) designed to trick users into installing it instead of a legitimate package. The malicious code was detected and cataloged by the OpenSSF's malicious-packages project.

Indicators of compromise

Packages
  • yelp-pkg

Remediation

  • Remove yelp-pkg from all systems where it was installed
  • Audit environment variables and secrets that may have been exposed
  • Review system logs for any suspicious activity following installation
  • Use dependency scanning tools to detect similar malicious packages
  • Verify the legitimacy of package names before installation, especially those similar to well-known projects

Sources

  1. GitHub Advisory GHSA-f6pg-w2v6-3cj7 · GitHub Advisory Database

Cite this entry

"Malicious code in yelp-pkg (PyPI)." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed July 21, 2026; last updated July 21, 2026. https://supplychainattack.org/incident/malicious-code-in-yelp-pkg-pypi-7emxe8

Suggest a correction

Found an error or have a newer source? Corrections to factual errors take priority over new entries.

Related incidents

  1. resolvedhigh

    Malicious code in adandu (PyPI)

    The PyPI package 'adandu' was identified as malicious, containing code to exfiltrate basic system information (hostname, path, username) upon installation or import. The package was part of a broader campaign of pentest-themed malicious packages and communicated with domains associated with malicious activity.

    PyPICompromised packageTyposquattingDependency confusion
  2. resolvedhigh

    Malicious code in adandv (PyPI)

    The adandv package on PyPI contained malicious code designed to exfiltrate basic system information (hostname, path, username) to the package author. The package was part of a broader campaign of malicious pentest-themed packages flooding PyPI.

    PyPICompromised packageTyposquattingDependency confusion
  3. resolvedcritical

    Malicious code in zamino (PyPI)

    The PyPI package zamino was identified as malicious code—a clone of legitimate Aminoapps libraries with added credential exfiltration functionality. The package was part of the 2025-06-sorex campaign and has been cataloged by the OpenSSF malicious packages database.

    2025 06 SorexPyPICompromised packageTyposquatting
  4. resolvedcritical

    Malicious code in youreallydontwantthispackage2132 (PyPI)

    Malicious code was published in the PyPI package youreallydontwantthispackage2132 version 1.0.3. The package executes malicious code during installation via setup.py override and communicates with domains associated with malicious activity, exfiltrating environment variables and other data.

    PyPICompromised packageTyposquatting