dydx-v4-client

PyPI Compromised

1

report

Attack type: Malicious version

Reports

Malicious version Versions: = 1.1.5.post1 67d ago by isitcompromised.com

A single post-release of dydx-v4-client contained obfuscated multi-stage loader A PyPI user account compromised by an attacker and was able to upload a malicious version (1.1.5.post1) of the `dydx-v4-client` package. This version contains a highly obfuscated multi-stage loader that ultimately executes malicious code on the host system. While the final payload is not visible because it is tucked away inside 100 layers of encoding, the structural design—specifically the use of recursive decompression followed by an `exec()` call is a definitive indicator of malicious softwar

View evidence

Have more info?

Submit additional evidence or a new report for this package.

Submit a report