tronkeypy

MAL-2025-47807

PyPImalware9/12/2025
Description

Malicious code in tronkeypy (PyPI)

Indicators of Compromise
SHA256 Hashes (4)
9cfd8f0a4b7dca8e2e35d411949768d04384f507e61bb7f31cc03fd31a1a7c61
312a0ec68af533d425ccdf6a359beca19c6ec31e5306b1a420df4d113177e204
15beba1021e7f60daed074087734c4a931b0b0d93695e6d1bf28aea909f41a80
7a8bf9adb7205ec89e49d3e2eeb767d675f40de38061ca92d5b81a217407f216
Domains (4)
68076f26e81df7060eba3e58.mockapi.io66c0dc0bba6f27ca9a57c4bf.mockapi.io67b9f37c51192bd378dee810.mockapi.ioreda-sequestered-justine.ngrok-free.dev
References (2)
https://en.wikipedia.org/wiki/Tron_(blockchain)OSVhttps://bad-packages.kam193.eu/pypi/package/tronkeypyOSV
Details
EcosystemPyPI
Attack Typemalware
Published9/12/2025
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001