The executor-engine PyPI package versions 0.3.4 and 0.3.5 were compromised by attackers who republished a legitimate package version with an added malicious site-packages.pth file. This file contains obfuscated Python code that executes on every interpreter start, downloading the Bun JavaScript runtime and running a heavily obfuscated infostealer JavaScript payload. The infostealer collects a wide range of sensitive information including environment variables, cloud tokens, credentials, cryptocurrency assets, and password manager data. It also attempts to gain persistence and spread by publishing infected packages using stolen credentials. The malicious code detects sandbox environments and may perform destructive actions such as wiping user data if invalid GitHub tokens are found. This campaign is categorized as malicious and linked to the Mini Shai Hulud campaign.

Installation or use of executor-engine versions 0.3.4 or 0.3.5 results in execution of malicious code on every Python interpreter start, leading to exfiltration of sensitive data including API keys, credentials, cryptocurrency assets, and password manager information. The attacker can gain persistence and propagate the infection by publishing additional compromised packages using stolen credentials. There is also a risk of destructive actions such as data wiping if invalid GitHub tokens are detected. This compromises confidentiality, integrity, and availability of affected systems and data.

No official patch or remediation is currently documented. Users should avoid installing or using executor-engine versions 0.3.4 and 0.3.5. If these versions are installed, immediate removal of the package and thorough system inspection for persistence mechanisms and exfiltration artifacts is recommended. Cleanup should be performed cautiously due to potential destructive payloads. Monitor for updates from the package maintainers or PyPI for official remediation guidance.