pypi · Malicious package advisory
Malwaresolana-live
MAL-2025-5138
Malicious code in solana-live (PyPI)
Details
--- _-= Per source details. Do not edit below this line.=-_ ## Source: kam193 (edea0605b97d331d0da7af79c24a8875042687bf06aed9192f7cded40da09012) Code exfiltrates the current python code and/or IPythonshell history --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-05-solana-token Reasons (based on the campaign): - crypto-related - impersonation - action-hidden-in-lib-usage - exfiltration-crypto
Compromised versions (1)
- 0.1.0
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.