Massive Supply-Chain Breach Hits Python Package Ecosystem, 180+ Malicious Packages Found on PyPI

Security researchers have uncovered a large-scale supply-chain attack targeting the Python Package Index (PyPI), where more than 180 malicious Python packages were uploaded to infect developers and organizations through poisoned open-source dependencies. The campaign, active for weeks before detection, used sophisticated techniques such as typosquatting, dependency confusion, and obfuscated payloads designed to silently steal authentication tokens, cloud credentials, browser cookies, SSH keys, and cryptocurrency wallets once the packages were installed.

Unlike previous small malware uploads, this campaign showed a level of coordination that suggests an advanced actor—possibly cybercriminal groups specializing in cloud infiltration—given the packages’ ability to exfiltrate data to distributed command-and-control domains and pivot into CI/CD pipelines. Researchers observed that the malicious packages mimicked widely used libraries by using nearly identical names, causing developers to unknowingly import the infected versions during software builds. The malware also included persistence mechanisms that allowed attackers to execute arbitrary scripts inside development environments, meaning organizations using DevOps automation or continuous integration workflows could have unknowingly introduced the malware deep into their software supply chains. PyPI administrators removed the malicious packages and issued a security advisory, but experts warn that thousands of developers may have downloaded them before takedown, potentially exposing internal systems, production servers, and cloud infrastructure. This incident highlights the escalating threat to open-source ecosystems, where attackers increasingly target developer environments as an entry point into high-value corporate networks. Security teams are urged to audit all dependency installations, enable package-signing verification, monitor CI/CD environments for anomalous script execution, and tighten supply-chain security controls to prevent long-term compromise.