When PyPI Becomes the Attack Vector: 39,000+ Downloads of Malicious Python Packages

Most of us trust pip install a bit more than we probably should.

This week, researchers from ReversingLabs and Socket uncovered three malicious packages on PyPI that had been downloaded over 39,000 times. Their goals? Steal sensitive data and validate stolen credit cards wrapped in innocent-looking Python packages.

Fake Fixes, Real Malware

Two of the packages, bitcoinlibdbfix and bitcoinlib-dev, pretended to be patches for the popular bitcoinlib module. The third, disgrasya, didn’t even pretend to be nice.

Downloads:

• bitcoinlibdbfix: 1,101
• bitcoinlib-dev: 735
• disgrasya: 37,217

Pro tip: if a package is literally called “disgrasya” (Filipino slang for “disaster”)... maybe don’t install it blindly.

So, what did these packages actually do?

The “fix” packages:

• Overwrote the clw cli command.
• Embedded malicious code that exfiltrated local database files.

disgrasya, on the other hand:

• Contained a fully automated carding script.
• Targeted WooCommerce stores using CyberSource as the payment gateway.
• Emulated a full buyer journey:
  1. Found a product
  2. Added it to the cart
  3. Reached checkout
  4. Filled in stolen credit card data
  5. Sent everything to an attacker-controlled server (railgunmisaka[.]com)

This is done to validate stolen cards without tripping fraud detection systems.

The social engineering twist

The authors of the fake bitcoinlib packages even joined a GitHub issue thread, trying to convince other users to install their “fix.” It didn't work, but it's worth noting that supply chain attacks aren’t just about code but also about people.

Why this matters

• Modular tools: Packages like disgrasya are plug-and-play for larger automation frameworks.
• Official channels: These weren’t shady downloads from weird forums. They were live on PyPI.

What can you do?

The boring advice still holds:

• Review dependencies (especially obscure ones).
• Lock down versions and hashes.
• Use tools like pip-audit, bandit, or safety.

Also, don’t install something just because the name sounds like it might fix a bug you’re experiencing, especially when it wasn’t mentioned in the official repo.