Malicious code in ython-binance (PyPI)
Attacker distributed 900+ malicious packages via PyPI, including ython-binance, which installed malicious browser extensions designed to manipulate clipboard and replace cryptocurrency wallet addresses.
- Disclosed
- Last updated
- Blast radius
- 900+ malicious packages distributed; targets cryptocurrency users via browser extension injection
- Ecosystems
- Attack vectors
- Affected entities
- ython-binanceTyposquatting variant of python-binance; distributed via PyPI
An attacker distributed over 900 malicious packages via PyPI as part of a coordinated campaign. The ython-binance package was one of these malicious distributions, appearing as a typosquatting variant of the legitimate python-binance library.
The malicious packages installed browser extensions that performed clipboard manipulation and cryptocurrency wallet address replacement attacks. This allowed attackers to intercept and redirect cryptocurrency transactions from affected users.
The campaign was identified and documented by the OpenSSF's malicious-packages repository (MAL-2023-2470). The packages have since been removed from PyPI.
Indicators of compromise
- Packages
- ython-binance
Remediation
- Remove ython-binance and any other suspicious packages from affected systems
- Audit installed browser extensions and remove any unfamiliar or suspicious extensions
- Review recent cryptocurrency transactions for unauthorized activity
- Use only the legitimate python-binance package from trusted sources
- Implement package verification and integrity checks in dependency management workflows
- Monitor PyPI for typosquatting variants of commonly-used packages
Sources
- GitHub Advisory GHSA-4mwc-wwhg-2w5c · GitHub Advisory Database
Cite this entry
"Malicious code in ython-binance (PyPI)." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed July 21, 2026; last updated July 21, 2026. https://supplychainattack.org/incident/malicious-code-in-ython-binance-pypi-12zo2f
Suggest a correction
Found an error or have a newer source? Corrections to factual errors take priority over new entries.
Related incidents
- resolvedhigh
Malicious code in adandu (PyPI)
The PyPI package 'adandu' was identified as malicious, containing code to exfiltrate basic system information (hostname, path, username) upon installation or import. The package was part of a broader campaign of pentest-themed malicious packages and communicated with domains associated with malicious activity.
PyPICompromised packageTyposquattingDependency confusion - resolvedcritical
Malicious code in yelp-pkg (PyPI)
yelp-pkg, a malicious package on PyPI, was designed to exfiltrate sensitive data including environment variables during installation. The package overrides the install command in setup.py to execute malicious code and appears to be a typosquatting attack.
PyPICompromised packageTyposquatting - resolvedhigh
Malicious code in adandv (PyPI)
The adandv package on PyPI contained malicious code designed to exfiltrate basic system information (hostname, path, username) to the package author. The package was part of a broader campaign of malicious pentest-themed packages flooding PyPI.
PyPICompromised packageTyposquattingDependency confusion - resolvedcritical
Malicious code in zamino (PyPI)
The PyPI package zamino was identified as malicious code—a clone of legitimate Aminoapps libraries with added credential exfiltration functionality. The package was part of the 2025-06-sorex campaign and has been cataloged by the OpenSSF malicious packages database.
2025 06 SorexPyPICompromised packageTyposquatting