Malicious code in company-sdk (PyPI)

The company-sdk PyPI package version 0.0.1 includes embedded malicious code that activates during module import. It scans the installer's home directory for SSH keys, cloud provider credentials, package manager tokens, Docker/Kubernetes configs, environment files, Vault/Terraform tokens, shell history, and environment variables with credential-related names. The harvested data is compressed, encrypted with a key derived from a hardcoded passphrase, HMAC-tagged, base64-encoded, and then uploaded to a private GitHub Gist via the GitHub API using a hardcoded personal access token. TLS certificate verification is disabled during the upload, and the operation is enclosed in a try/except block to suppress errors. This method leverages GitHub Gist as a covert exfiltration channel that likely bypasses egress filtering and conceals payload contents from network inspection.

Sensitive credentials and configuration files including SSH keys, cloud service credentials, package manager tokens, and environment variables are exfiltrated from the victim's environment to an attacker-controlled GitHub Gist. This compromises the confidentiality of the victim's secrets and can lead to further unauthorized access or compromise of cloud resources, developer environments, and other systems relying on these credentials.

No official patch or remediation is currently documented. Users should immediately uninstall the company-sdk package version 0.0.1 and avoid using this package. Review and revoke any potentially exposed credentials, including GitHub tokens and cloud service keys. Monitor for unauthorized access using the compromised credentials. Since the exfiltration is embedded in the package code and runs on import, avoid installing or importing untrusted or suspicious packages from PyPI. Patch status is not yet confirmed — check the vendor advisory or PyPI security notices for updates.