The ensmallen PyPI package version 0.8.101 was compromised to include heavily obfuscated JavaScript infostealer code executed by the Bun runtime during Python startup. The malicious code collects a wide range of sensitive information including environment variables, cloud tokens, credentials, and cryptocurrency data. It actively queries online services to gather additional secrets and attempts to maintain persistence and propagate by publishing infected packages using stolen credentials. Data exfiltration likely occurs via GitHub. The malware also includes destructive functionality that may wipe user data if invalid GitHub tokens are detected. This incident is associated with the Mini Shai Hulud campaign and demonstrates multiple malicious behaviors such as sandbox evasion, obfuscation, and credential theft.

Sensitive user data including API keys, package repository credentials, cryptocurrency assets, and password manager data can be stolen. The malware can spread further by publishing infected packages using stolen credentials, potentially compromising additional users. There is also a risk of destructive actions such as wiping user data if certain conditions are met. This compromises confidentiality, integrity, and availability of affected systems and data.

No official patch or remediation is currently available. Users should avoid using ensmallen version 0.8.101. Cleanup should be performed with caution due to the malware's destructive capabilities. It is recommended to remove the compromised package, revoke any exposed credentials, and monitor for unauthorized package publishing activity. Check vendor or PyPI advisories for updates or official fixes.