MAL-2026-13729

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/dlmm-sdk/MAL-2026-13729.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-13729
Published
2026-08-11T06:21:47Z
Modified
2026-08-12T08:45:09Z
Summary
Malicious code in dlmm-sdk (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (9ddf2d03d839f7eff709e78da1d6a85226cdd3b9171dbcb59a4a95c741e0773e)

The package's top-level module runs a report() routine on import, and setup.py invokes the same import at install time. The routine collects environment variables matching secret-shaped keywords (KEY, TOKEN, SECRET, AWS, GITHUB, NPM, MNEMONIC, WALLET, SOLANA, HELIUS,...), reads ~/.npmrc and ~/.gitconfig, enumerates ~/.ssh, ~/.aws, ~/.config/solana, ~/.config/anchor, and ~/.config/gcloud, and gathers hostname, username, cwd, and platform. The collected JSON is POSTed via urllib.request.urlopen to a hardcoded webhook.site endpoint (https://webhook.site/326b0891-2093-4800-a4c1-686ce3e07b09). Module docstring and setup.py comment label the behavior 'environment diagnostics,' but the code path is bulk credential and host-identity exfiltration to a non-first-party collector. The package name resembles Meteora's DLMM SDK.

Source: kam193 (e711193dc1874123e46e44138b8d69212d6838fdb4b4d93f84cdbc9041e74457)

During import the package exfiltrates sensitive env variables (e.g. related to cloud providers, cryptocurrencies, package registries), credential files (including SSH keys, cloud credentials, package registry configuration) and dotenv files. In addition, listings of some directories, e.g. cryptocurrency wallets and cloud CLI configuration, are collected.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-08-dlmm

Reasons (based on the campaign):

  • exfiltration-env-variables

  • dependency-confusion

  • crypto-related

  • exfiltration-credentials

  • files-exfiltration

Database specific 
{
    "iocs": {
        "urls": [
            "https://webhook.site/326b0891-2093-4800-a4c1-686ce3e07b09"
        ]
    },
    "malicious-packages-origins": [
        {
            "id": "pypi/2026-08-dlmm/dlmm-sdk",
            "import_time": "2026-08-11T06:52:08.445216839Z",
            "modified_time": "2026-08-11T06:21:47.186449Z",
            "sha256": "007be0fc2d53a2c72f277ddb12c24bb04ae1e17d2bf03f83b70367c3bf1b9122",
            "source": "kam193",
            "versions": [
                "1.0.0"
            ]
        },
        {
            "id": "pypi/2026-08-dlmm/dlmm-sdk",
            "import_time": "2026-08-11T11:20:20.16136185Z",
            "modified_time": "2026-08-11T06:21:47.186449Z",
            "sha256": "4095827122c8b9e11fecdcf9d7bc8f80838e876d3fc0d518b3fa883df1d6b0e1",
            "source": "kam193",
            "versions": [
                "1.0.0"
            ]
        },
        {
            "id": "IN-MAL-2026-017287",
            "import_time": "2026-08-11T12:23:04.757162533Z",
            "modified_time": "2026-08-11T11:58:24Z",
            "sha256": "9ddf2d03d839f7eff709e78da1d6a85226cdd3b9171dbcb59a4a95c741e0773e",
            "source": "amazon-inspector",
            "versions": [
                "1.0.0"
            ]
        },
        {
            "id": "pypi/2026-08-dlmm/dlmm-sdk",
            "import_time": "2026-08-12T08:36:26.115855257Z",
            "modified_time": "2026-08-11T06:21:47.186449Z",
            "sha256": "e711193dc1874123e46e44138b8d69212d6838fdb4b4d93f84cdbc9041e74457",
            "source": "kam193",
            "versions": [
                "1.0.0"
            ]
        }
    ]
}
References
Credits

Affected packages

PyPI / dlmm-sdk

Package

Name
dlmm-sdk
View open source insights on deps.dev
Purl
pkg:pypi/dlmm-sdk

Affected ranges

Affected versions

1.*
1.0.0

Database specific

cwes 
[
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    }
]
indicators 
{
    "evidence_files": [
        {
            "path": "dlmm-sdk/__init__.py",
            "sha256": "a2268e2e9f21b84a0623c69f16f2cf56f4ea3f05e823d234fea77d2260d78949",
            "tlsh": "1231409e49275c016247f18e843791f02b3db943ed0670a9b8ac6b009fce9adc1b127d"
        },
        {
            "path": "setup.py",
            "sha256": "5762312989452bfa7e336f1e0afeca74b7e93423a12829af4cb661c071c1f11a",
            "tlsh": "70f00e72c806caa52661db51047854ea4bbb96a33e6290ccf4fc23105f8975ac01fe82"
        }
    ],
    "package_integrity": [
        {
            "filename": "dlmm_sdk-1.0.0-py3-none-any.whl",
            "hashes": {
                "blake2b_256": "1220b14c881d3c0b04d5109f9842aef6f3a4d4a422440922abfedad55febcb30",
                "md5": "6634c37b2adeb3f7e888a9d1c2bb6cb4",
                "sha256": "7ef6c5b910bfeaa35b99dbebb7dfe3cbaf38e7ea4ea37e693f46c6e12968dff7"
            }
        },
        {
            "filename": "dlmm_sdk-1.0.0.tar.gz",
            "hashes": {
                "blake2b_256": "4f16ae21f4e98acee912377bacbc79f41b17e70fe7d107c40e9dec4d34a1154e",
                "md5": "10b622c837eccec98d409df824b6d9ab",
                "sha256": "36203b232980fc2c5952fd792c9c3f517b63832e0319937331a972c00c328344"
            }
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/dlmm-sdk/MAL-2026-13729.json"