solana-sdkpy

MAL-2025-6588

PyPImalware7/4/2025
Description

Malicious code in solana-sdkpy (PyPI)

Indicators of Compromise
SHA256 Hashes (6)
a39c7810762407fd92004b6131659cc166353feb3ef23c53e1ac64c73cd36af9
0a24eba74be85d4514966918be8a62fcd990c836bca72016ef4290ff15211024
8547af2904fbee83f4b917b00212906712d92ba5f59c723eff2f05bfd3ed503a
fa656c982797b0a9ae09399aa3204b8925d4608935f9b563f498224bebf39b04
09f209e48c9350be29ca72e76c84a942618776e853edcab600350280b81bfdd7
f47ee40cfd0e9795a39169e47ec90e1372d8366cac29b5210bb6528edee45101
Domains (3)
chrome-data-receiver.up.railway.appchrome-extract.up.railway.appvell-production.up.railway.app
References (2)
https://www.fortinet.com/blog/threat-research/malicious-packages-across-open-source-registriesOSVhttps://bad-packages.kam193.eu/pypi/package/solana-sdkpyOSV
Details
EcosystemPyPI
Attack Typemalware
Published7/4/2025
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001