Malicious code in numpyp (PyPI)
The PyPI package 'numpyp' is a malicious typo-squatting package mimicking the popular 'numpy' library. It exports functions that send any input data provided by the user to a hardcoded external server controlled by the attacker without disclosure. This can lead to inadvertent leakage of sensitive information such as secrets or proprietary data if a developer mistakenly installs and uses 'numpyp' instead of 'numpy'.
AI Analysis
Technical Summary
The 'numpyp' package on PyPI, version 0.7.7, is a malicious package designed to impersonate the legitimate 'numpy' library by name similarity. Its implementation includes functions that unconditionally send caller-supplied data via HTTP POST/GET requests to a hardcoded ngrok tunnel URL controlled by the attacker. The package does not disclose this behavior in its README, posing a risk of silent data exfiltration if developers accidentally install and invoke its API.
Potential Impact
Users who mistakenly install 'numpyp' instead of 'numpy' and call its exported functions may unknowingly transmit sensitive or proprietary information to an attacker-controlled endpoint. This can result in data leakage of secrets, confidential code, or other sensitive content without user awareness.
Mitigation Recommendations
There is no official patch or fix for this malicious package. The recommended mitigation is to avoid installing 'numpyp' and ensure correct package names when using pip. Users should verify package authenticity before installation and prefer official, well-known packages. If 'numpyp' is installed, it should be uninstalled immediately. No configuration or override is available to prevent data exfiltration within the package.
Malicious code in numpyp (PyPI)
Description
The PyPI package 'numpyp' is a malicious typo-squatting package mimicking the popular 'numpy' library. It exports functions that send any input data provided by the user to a hardcoded external server controlled by the attacker without disclosure. This can lead to inadvertent leakage of sensitive information such as secrets or proprietary data if a developer mistakenly installs and uses 'numpyp' instead of 'numpy'.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The 'numpyp' package on PyPI, version 0.7.7, is a malicious package designed to impersonate the legitimate 'numpy' library by name similarity. Its implementation includes functions that unconditionally send caller-supplied data via HTTP POST/GET requests to a hardcoded ngrok tunnel URL controlled by the attacker. The package does not disclose this behavior in its README, posing a risk of silent data exfiltration if developers accidentally install and invoke its API.
Potential Impact
Users who mistakenly install 'numpyp' instead of 'numpy' and call its exported functions may unknowingly transmit sensitive or proprietary information to an attacker-controlled endpoint. This can result in data leakage of secrets, confidential code, or other sensitive content without user awareness.
Mitigation Recommendations
There is no official patch or fix for this malicious package. The recommended mitigation is to avoid installing 'numpyp' and ensure correct package names when using pip. Users should verify package authenticity before installation and prefer official, well-known packages. If 'numpyp' is installed, it should be uninstalled immediately. No configuration or override is available to prevent data exfiltration within the package.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- MAL-2026-12503
- Osv Schema Version
- 1.7.4
- Aliases
- []
- Ecosystems
- ["PyPI"]
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a735744bf8831d539159cb7
Added to database: 08/05/2026, 15:31:16 UTC
Last enriched: 08/05/2026, 17:21:34 UTC
Last updated: 08/05/2026, 17:21:34 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.