ccxt-mexc-futures

MAL-2025-3439

PyPImalware3/10/2025
Description

Malicious code in ccxt-mexc-futures (PyPI)

Indicators of Compromise
SHA256 Hashes (6)
f8948ced2172fde60eaa2844530b5eb6d7f7e1c3e46860ffe1787d069de422d5
b960a73138bba5d79c9eaf82de51d667fc6305ab577d2bea22bde2b3535461bc
116fc2e7a8fe6b235f43036def48255cb8c8a75e7ad046f94155903e29403ca2
f2eb5eb75679b536c430ad6d5440e63fbe1d1cd391ab1abf2a411dae3a768ed8
f126fba8fb0e9d3ab356f93681fa35fcec759a2c6af2c6ab549e344ccfe85d38
ab711c6084603ee25b3619cb1e58fc0581b22e3a8ce3c15d13fa86252b12eafc
Domains (3)
update.mexc.workers.devv3.mexc.workers.devmexc.workers.dev
References (2)
https://jfrog.com/blog/malicious-pypi-package-hijacks-mexc-orders-steals-crypto-tokensOSVhttps://bad-packages.kam193.eu/pypi/package/ccxt-mexc-futuresOSV
Details
EcosystemPyPI
Attack Typemalware
Published3/10/2025
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001