Malicious code in ypthon-binance (PyPI)
Over 900 malicious packages were distributed via PyPI, including ypthon-binance, which installed malicious browser extensions designed to manipulate clipboard contents and replace cryptocurrency wallet addresses.
- Disclosed
- Last updated
- Blast radius
- 900+ malicious packages distributed via PyPI
- Ecosystems
- Attack vectors
- Affected entities
- ypthon-binanceTyposquatting package (likely mimicking python-binance)
A large-scale malicious package campaign distributed over 900 compromised or typosquatting packages via PyPI. The ypthon-binance package was among those identified as malicious.
The malicious packages installed browser extensions that performed clipboard manipulation and cryptocurrency wallet address replacement attacks. This attack vector targeted users who copied and pasted wallet addresses, replacing them with attacker-controlled addresses to redirect cryptocurrency transactions.
The campaign was identified and documented by Checkmarx and credited to the OpenSSF malicious-packages repository. The incident represents a significant supply chain attack leveraging PyPI's package distribution mechanism.
Indicators of compromise
- Packages
- ypthon-binance
Remediation
- Immediately uninstall ypthon-binance and any other suspicious packages from affected systems
- Audit installed Python packages for unexpected or unfamiliar names, particularly those similar to legitimate packages
- Remove any suspicious browser extensions installed by the malicious packages
- Review cryptocurrency wallet addresses in clipboard history and verify any recent transactions
- Use package name verification tools and check official package sources before installation
- Monitor PyPI for typosquatting attempts of commonly-used packages
Sources
- GitHub Advisory GHSA-wc3f-9qh5-wqw9 · GitHub Advisory Database
Cite this entry
"Malicious code in ypthon-binance (PyPI)." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed July 21, 2026; last updated July 21, 2026. https://supplychainattack.org/incident/malicious-code-in-ypthon-binance-pypi-qbvtx9
Suggest a correction
Found an error or have a newer source? Corrections to factual errors take priority over new entries.
Related incidents
- resolvedhigh
Malicious code in adandu (PyPI)
The PyPI package 'adandu' was identified as malicious, containing code to exfiltrate basic system information (hostname, path, username) upon installation or import. The package was part of a broader campaign of pentest-themed malicious packages and communicated with domains associated with malicious activity.
PyPICompromised packageTyposquattingDependency confusion - resolvedcritical
Malicious code in yelp-pkg (PyPI)
yelp-pkg, a malicious package on PyPI, was designed to exfiltrate sensitive data including environment variables during installation. The package overrides the install command in setup.py to execute malicious code and appears to be a typosquatting attack.
PyPICompromised packageTyposquatting - resolvedhigh
Malicious code in adandv (PyPI)
The adandv package on PyPI contained malicious code designed to exfiltrate basic system information (hostname, path, username) to the package author. The package was part of a broader campaign of malicious pentest-themed packages flooding PyPI.
PyPICompromised packageTyposquattingDependency confusion - resolvedcritical
Malicious code in zamino (PyPI)
The PyPI package zamino was identified as malicious code—a clone of legitimate Aminoapps libraries with added credential exfiltration functionality. The package was part of the 2025-06-sorex campaign and has been cataloged by the OpenSSF malicious packages database.
2025 06 SorexPyPICompromised packageTyposquatting