Malicious code in ypsocks (PyPI)
Attacker distributed 900+ malicious packages via PyPI, including ypsocks, which infected local browsers with malicious extensions designed to manipulate clipboard and replace cryptocurrency wallet addresses.
- Disclosed
- Last updated
- Blast radius
- 900+ malicious packages distributed via PyPI
- Ecosystems
- Attack vectors
- Affected entities
- ypsocksPyPI package containing malicious code
A large-scale malicious package campaign was discovered on PyPI involving the distribution of over 900 malicious packages. The ypsocks package was identified as part of this campaign and contained malicious code.\n\nThe malicious packages were designed to install browser extensions that would manipulate users' clipboards and replace cryptocurrency wallet addresses, enabling theft of cryptocurrency transactions.\n\nThe incident was documented by the OpenSSF's malicious-packages repository (MAL-2023-2467) and credited to Checkmarx for discovery. The packages have since been removed from PyPI.
Indicators of compromise
- Packages
- ypsocks
Remediation
- Remove ypsocks and any other packages from the identified malicious campaign from all systems
- Audit pip package installations for presence of malicious packages from the 900+ package list
- Review browser extensions for unauthorized or suspicious extensions installed during the compromise window
- Monitor cryptocurrency wallet transactions for unauthorized activity
- Update to clean versions of legitimate packages if ypsocks was a typosquatted or compromised legitimate package
Sources
- GitHub Advisory GHSA-fqqc-x58v-cg38 · GitHub Advisory Database
Cite this entry
"Malicious code in ypsocks (PyPI)." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed July 21, 2026; last updated July 21, 2026. https://supplychainattack.org/incident/malicious-code-in-ypsocks-pypi-dg09ki
Suggest a correction
Found an error or have a newer source? Corrections to factual errors take priority over new entries.
Related incidents
- resolvedcritical
Malicious code in vtranalytic (PyPI)
The vtranalytic package on PyPI contained malicious code implementing a Telegram-bot-driven remote administration tool that provides full system control to an attacker holding the configured bot token. The package exfiltrates credentials, SSH keys, and arbitrary files via Telegram API, and executes arbitrary shell commands through a documented `run` command.
PyPICompromised packageMalicious maintainer - containedcritical
Malicious code in govapkg (PyPI)
govapkg, a malicious PyPI package, downloads and executes a hidden binary on first use, establishing persistence via a systemd desktop autostart entry. The package obfuscates its malicious behavior through base64-encoded URLs and downloads from unverified external sources.
PyPICompromised packageMalicious commit - containedcritical
Malicious code in dev-helper-bg (PyPI)
The PyPI package dev-helper-bg contained malicious code that executed arbitrary commands on import. The package decrypted and executed remotely-controlled code fetched from an external endpoint, and spawned a Telegram bot for command and control.
2026 07 Make HelperPyPICompromised packageMalicious commit - containedcritical
Malicious code in karpatkit (PyPI)
The karpatkit package on PyPI contained malicious code that exfiltrated sensitive credentials and secrets on import. The package spawned a daemon thread collecting environment variables, cloud credentials, SSH keys, Kubernetes tokens, cryptocurrency wallets, and shell histories, then transmitted them via HTTP to hardcoded IP addresses.
PyPICompromised packageMalicious commit