Malicious code in ypinstaller (PyPI)
Attacker distributed 900+ malicious packages via PyPI, including ypinstaller, which installed malicious browser extensions designed to manipulate clipboard contents and replace cryptocurrency wallet addresses.
- Disclosed
- Last updated
- Blast radius
- 900+ malicious packages distributed via PyPI
- Ecosystems
- Attack vectors
- Affected entities
- ypinstallerPyPI package
An attacker distributed over 900 malicious packages via the Python Package Index (PyPI), including the package ypinstaller. These packages contained code that installed malicious browser extensions on infected systems.\n\nThe malicious extensions were designed to intercept and manipulate clipboard data, specifically targeting cryptocurrency wallet addresses. When users copied wallet addresses, the extension would replace them with attacker-controlled addresses, enabling theft of cryptocurrency transfers.\n\nThe incident was documented by the OpenSSF's malicious-packages repository and attributed to Checkmarx research. The packages have since been removed from PyPI.
Indicators of compromise
- Packages
- ypinstaller
Remediation
- Remove ypinstaller and any other suspicious packages from affected systems
- Audit installed browser extensions and remove any unknown or suspicious extensions
- Review recent clipboard activity and cryptocurrency transactions for signs of address replacement
- Check PyPI package installation logs for ypinstaller or related packages from the 900+ malicious package campaign
- Use only verified and well-maintained packages from trusted sources
- Enable package signature verification where available
Sources
- GitHub Advisory GHSA-m458-8r93-f7q6 · GitHub Advisory Database
Cite this entry
"Malicious code in ypinstaller (PyPI)." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed July 21, 2026; last updated July 21, 2026. https://supplychainattack.org/incident/malicious-code-in-ypinstaller-pypi-br6vrn
Suggest a correction
Found an error or have a newer source? Corrections to factual errors take priority over new entries.
Related incidents
- resolvedhigh
Malicious code in riakcs (PyPI)
The riakcs package on PyPI contained malicious code that exfiltrates basic host information (IP address, username) during installation. The package overrides the install command in setup.py to execute the malicious payload when installed.
PyPICompromised package - containedcritical
Malicious code in fastapii (PyPI)
The fastapii package on PyPI is a typosquatting attack imitating the popular FastAPI library. During installation, it executes obfuscated code that downloads and runs a malicious executable, exfiltrating cryptocurrency wallet data and potentially other sensitive information.
2026 08 FlasqPyPITyposquattingCompromised package - containedcritical
Malicious code in idnna (PyPI)
A malicious package named idnna was published to PyPI, imitating a legitimate library. During installation, the package executes obfuscated code that downloads and runs a malicious executable, exfiltrating cryptocurrency wallet data and potentially other sensitive information.
PyPITyposquattingCompromised package - containedcritical
Malicious code in pydanticc (PyPI)
The PyPI package pydanticc is a typosquatting attack imitating the popular pydantic library. During installation, it executes obfuscated code that downloads and runs a malicious executable, exfiltrating cryptocurrency wallet data and potentially other sensitive information.
2026 08 FlasqPyPITyposquattingCompromised package