s3transfer-sl

GHSA-g3f5-m842-7jqg

Malicious code in s3transfer-sl (PyPI)

Details

**Severity:** Critical

**Affected versions:** `= 0.12.4`

## Source: kam193 (e1cc7c88223c47e4c3ceecc6fe73d05c1cbb505061a009f8ae5caf37086a2e09)
During installation, the package attempts to exfiltrate env variables and tokens from Azure metadata API. It's a malicious clon of s3transfer


---

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.


Campaign: 2025-04-s3transfer-sl


Reasons (based on the campaign):


 - exfiltration-cloud-tokens


 - clones-real-package


 - typosquatting

---

Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/49d0cfba3689ed9b195d101d3a2a964c6a77f767/osv/malicious/pypi/s3transfer-sl/MAL-2025-191861.json))

**References:**
- https://bad-packages.kam193.eu/pypi/package/s3transfer-sl
- https://github.com/ossf/malicious-packages/blob/49d0cfba3689ed9b195d101d3a2a964c6a77f767/osv/malicious/pypi/s3transfer-sl/MAL-2025-191861.json
- https://github.com/advisories/GHSA-g3f5-m842-7jqg

Compromised versions (1)

= 0.12.4

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.