pypi · Malicious package advisory
Malwaretronlibapi
MAL-2025-6608
Malicious code in tronlibapi (PyPI)
Details
--- _-= Per source details. Do not edit below this line.=-_ ## Source: kam193 (9691194771bc292f5583fcde670bceb7173ec8ec2e1f4a16f1af1322fce21a80) Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX (Tron / Tronix). Some packages additionally clone the readme of other, legit libraries. The similar packages are repeating uploaded to PyPI --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-04-tronix Reasons (based on the campaign): - exfiltration-generic - crypto-related
Compromised versions (1)
- 0.0.1
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.