The dlmm-sdk PyPI package version 1.0.0 executes a report() routine during import and installation that collects environment variables containing secret-like keywords, reads sensitive configuration files (~/.npmrc, ~/.gitconfig), enumerates credential directories (~/.ssh, ~/.aws, ~/.config/solana, ~/.config/anchor, ~/.config/gcloud), and gathers host identity information such as hostname, username, current working directory, and platform. The collected data is serialized as JSON and exfiltrated via an HTTP POST request to a hardcoded webhook.site URL. The package's documentation misleadingly labels this behavior as 'environment diagnostics,' but it is a clear credential and host information exfiltration campaign. This malicious activity is linked to a campaign identified as 2026-08-dlmm, involving dependency confusion and targeting crypto-related secrets.

Sensitive credentials and environment data, including cloud provider secrets, cryptocurrency wallet information, SSH keys, and configuration files, are exfiltrated to an attacker-controlled endpoint. This can lead to unauthorized access to cloud resources, cryptocurrency theft, compromise of developer environments, and further supply chain attacks through dependency confusion.

No official patch or remediation is currently documented. Users should immediately uninstall the dlmm-sdk package version 1.0.0 and avoid using this package. Verify that no credentials have been compromised and rotate any secrets that may have been exposed. Monitor for any suspicious activity related to the leaked credentials. Check the vendor or PyPI advisories for updates or removal of the malicious package.