dlmm-sdk

{"schema_version":"1.7.4","id":"MAL-2026-13729","published":"2026-08-11T06:21:47Z","modified":"2026-08-12T08:38:02.985327517Z","summary":"Malicious code in dlmm-sdk (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (9ddf2d03d839f7eff709e78da1d6a85226cdd3b9171dbcb59a4a95c741e0773e)\nThe package's top-level module runs a report() routine on import, and setup.py invokes the same import at install time. The routine collects environment variables matching secret-shaped keywords (KEY, TOKEN, SECRET, AWS, GITHUB, NPM, MNEMONIC, WALLET, SOLANA, HELIUS,...), reads ~/.npmrc and ~/.gitconfig, enumerates ~/.ssh, ~/.aws, ~/.config/solana, ~/.config/anchor, and ~/.config/gcloud, and gathers hostname, username, cwd, and platform. The collected JSON is POSTed via urllib.request.urlopen to a hardcoded webhook.site endpoint (https://webhook.site/326b0891-2093-4800-a4c1-686ce3e07b09). Module docstring and setup.py comment label the behavior 'environment diagnostics,' but the code path is bulk credential and host-identity exfiltration to a non-first-party collector. The package name resembles Meteora's DLMM SDK.\n\n## Source: kam193 (e711193dc1874123e46e44138b8d69212d6838fdb4b4d93f84cdbc9041e74457)\nDuring import the package exfiltrates sensitive env variables (e.g. related to cloud providers, cryptocurrencies, package registries), credential files (including SSH keys, cloud credentials, package registry configuration) and dotenv files. In addition, listings of some directories, e.g. cryptocurrency wallets and cloud CLI configuration, are collected.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-08-dlmm\n\n\nReasons (based on the campaign):\n\n\n - exfiltration-env-variables\n\n\n - dependency-confusion\n\n\n - crypto-related\n\n\n - exfiltration-credentials\n\n\n - files-exfiltration\n","affected":[{"package":{"name":"dlmm-sdk","ecosystem":"PyPI"},"versions":["1.0.0"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"dlmm-sdk/__init__.py","sha256":"a2268e2e9f21b84a0623c69f16f2cf56f4ea3f05e823d234fea77d2260d78949","tlsh":"1231409e49275c016247f18e843791f02b3db943ed0670a9b8ac6b009fce9adc1b127d"},{"path":"setup.py","sha256":"5762312989452bfa7e336f1e0afeca74b7e93423a12829af4cb661c071c1f11a","tlsh":"70f00e72c806caa52661db51047854ea4bbb96a33e6290ccf4fc23105f8975ac01fe82"}],"package_integrity":[{"filename":"dlmm_sdk-1.0.0-py3-none-any.whl","hashes":{"blake2b_256":"1220b14c881d3c0b04d5109f9842aef6f3a4d4a422440922abfedad55febcb30","md5":"6634c37b2adeb3f7e888a9d1c2bb6cb4","sha256":"7ef6c5b910bfeaa35b99dbebb7dfe3cbaf38e7ea4ea37e693f46c6e12968dff7"}},{"filename":"dlmm_sdk-1.0.0.tar.gz","hashes":{"blake2b_256":"4f16ae21f4e98acee912377bacbc79f41b17e70fe7d107c40e9dec4d34a1154e","md5":"10b622c837eccec98d409df824b6d9ab","sha256":"36203b232980fc2c5952fd792c9c3f517b63832e0319937331a972c00c328344"}}]}}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/dlmm-sdk"},{"type":"PACKAGE","url":"https://pypi.org/project/dlmm-sdk/1.0.0/"}],"database_specific":{"iocs":{"urls":["https://webhook.site/326b0891-2093-4800-a4c1-686ce3e07b09"]},"malicious-packages-origins":[{"id":"pypi/2026-08-dlmm/dlmm-sdk","import_time":"2026-08-11T06:52:08.445216839Z","modified_time":"2026-08-11T06:21:47.186449Z","sha256":"007be0fc2d53a2c72f277ddb12c24bb04ae1e17d2bf03f83b70367c3bf1b9122","source":"kam193","versions":["1.0.0"]},{"id":"pypi/2026-08-dlmm/dlmm-sdk","import_time":"2026-08-11T11:20:20.16136185Z","modified_time":"2026-08-11T06:21:47.186449Z","sha256":"4095827122c8b9e11fecdcf9d7bc8f80838e876d3fc0d518b3fa883df1d6b0e1","source":"kam193","versions":["1.0.0"]},{"id":"IN-MAL-2026-017287","import_time":"2026-08-11T12:23:04.757162533Z","modified_time":"2026-08-11T11:58:24Z","sha256":"9ddf2d03d839f7eff709e78da1d6a85226cdd3b9171dbcb59a4a95c741e0773e","source":"amazon-inspector","versions":["1.0.0"]},{"id":"pypi/2026-08-dlmm/dlmm-sdk","import_time":"2026-08-12T08:36:26.115855257Z","modified_time":"2026-08-11T06:21:47.186449Z","sha256":"e711193dc1874123e46e44138b8d69212d6838fdb4b4d93f84cdbc9041e74457","source":"kam193","versions":["1.0.0"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}