MAL-2026-13729

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/dlmm-sdk/MAL-2026-13729.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-13729
Published
2026-08-11T06:21:47Z
Modified
2026-08-11T12:30:11.265355486Z
Summary
Malicious code in dlmm-sdk (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (9ddf2d03d839f7eff709e78da1d6a85226cdd3b9171dbcb59a4a95c741e0773e)

The package's top-level module runs a report() routine on import, and setup.py invokes the same import at install time. The routine collects environment variables matching secret-shaped keywords (KEY, TOKEN, SECRET, AWS, GITHUB, NPM, MNEMONIC, WALLET, SOLANA, HELIUS,...), reads ~/.npmrc and ~/.gitconfig, enumerates ~/.ssh, ~/.aws, ~/.config/solana, ~/.config/anchor, and ~/.config/gcloud, and gathers hostname, username, cwd, and platform. The collected JSON is POSTed via urllib.request.urlopen to a hardcoded webhook.site endpoint (https://webhook.site/326b0891-2093-4800-a4c1-686ce3e07b09). Module docstring and setup.py comment label the behavior 'environment diagnostics,' but the code path is bulk credential and host-identity exfiltration to a non-first-party collector. The package name resembles Meteora's DLMM SDK.

Source: kam193 (007be0fc2d53a2c72f277ddb12c24bb04ae1e17d2bf03f83b70367c3bf1b9122)

During import the package exfiltrates sensitive env variables and credential files. In addition, listings of cryptocurrency wallet directories are collected.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-08-dlmm

Reasons (based on the campaign):

  • exfiltration-env-variables

  • dependency-confusion

  • exfiltration-credentials

  • crypto-related

Database specific 
{
    "malicious-packages-origins": [
        {
            "import_time": "2026-08-11T06:52:08.445216839Z",
            "id": "pypi/2026-08-dlmm/dlmm-sdk",
            "sha256": "007be0fc2d53a2c72f277ddb12c24bb04ae1e17d2bf03f83b70367c3bf1b9122",
            "modified_time": "2026-08-11T06:21:47.186449Z",
            "source": "kam193",
            "versions": [
                "1.0.0"
            ]
        },
        {
            "id": "pypi/2026-08-dlmm/dlmm-sdk",
            "import_time": "2026-08-11T11:20:20.16136185Z",
            "sha256": "4095827122c8b9e11fecdcf9d7bc8f80838e876d3fc0d518b3fa883df1d6b0e1",
            "versions": [
                "1.0.0"
            ],
            "source": "kam193",
            "modified_time": "2026-08-11T06:21:47.186449Z"
        },
        {
            "id": "IN-MAL-2026-017287",
            "import_time": "2026-08-11T12:23:04.757162533Z",
            "sha256": "9ddf2d03d839f7eff709e78da1d6a85226cdd3b9171dbcb59a4a95c741e0773e",
            "versions": [
                "1.0.0"
            ],
            "source": "amazon-inspector",
            "modified_time": "2026-08-11T11:58:24Z"
        }
    ],
    "iocs": {
        "urls": [
            "https://webhook.site/326b0891-2093-4800-a4c1-686ce3e07b09"
        ]
    }
}
References
Credits

Affected packages

PyPI / dlmm-sdk

Package

Name
dlmm-sdk
View open source insights on deps.dev
Purl
pkg:pypi/dlmm-sdk

Affected ranges

Affected versions

1.*
1.0.0

Database specific

cwes 
[
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    }
]
indicators 
{
    "evidence_files": [
        {
            "path": "dlmm-sdk/__init__.py",
            "tlsh": "1231409e49275c016247f18e843791f02b3db943ed0670a9b8ac6b009fce9adc1b127d",
            "sha256": "a2268e2e9f21b84a0623c69f16f2cf56f4ea3f05e823d234fea77d2260d78949"
        },
        {
            "path": "setup.py",
            "tlsh": "70f00e72c806caa52661db51047854ea4bbb96a33e6290ccf4fc23105f8975ac01fe82",
            "sha256": "5762312989452bfa7e336f1e0afeca74b7e93423a12829af4cb661c071c1f11a"
        }
    ],
    "package_integrity": [
        {
            "filename": "dlmm_sdk-1.0.0-py3-none-any.whl",
            "hashes": {
                "sha256": "7ef6c5b910bfeaa35b99dbebb7dfe3cbaf38e7ea4ea37e693f46c6e12968dff7",
                "blake2b_256": "1220b14c881d3c0b04d5109f9842aef6f3a4d4a422440922abfedad55febcb30",
                "md5": "6634c37b2adeb3f7e888a9d1c2bb6cb4"
            }
        },
        {
            "filename": "dlmm_sdk-1.0.0.tar.gz",
            "hashes": {
                "sha256": "36203b232980fc2c5952fd792c9c3f517b63832e0319937331a972c00c328344",
                "blake2b_256": "4f16ae21f4e98acee912377bacbc79f41b17e70fe7d107c40e9dec4d34a1154e",
                "md5": "10b622c837eccec98d409df824b6d9ab"
            }
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/dlmm-sdk/MAL-2026-13729.json"