The orchestr8-platform PyPI package version 3.3.2 was compromised to include an obfuscated JavaScript infostealer executed with the Bun runtime during Python startup. The malware collects a wide range of sensitive information including environment variables, cloud tokens, credentials, and cryptocurrency data. It actively queries online services to gather additional secrets and attempts to maintain persistence and spread by publishing infected packages using stolen credentials. The exfiltration mechanism likely involves GitHub. The code also contains destructive functionality that may wipe user data if invalid GitHub tokens are detected. This compromise is associated with the Mini Shai Hulud campaign and exhibits multiple malicious behaviors such as sandbox detection, obfuscation, and file exfiltration.

Sensitive data including API keys, credentials for package repositories, cryptocurrency assets, and password manager data can be stolen. The malware can propagate by publishing infected packages using stolen credentials, potentially affecting other users. It may also perform destructive actions such as wiping user data if certain conditions are met. This poses a significant risk to confidentiality, integrity, and availability of affected systems and data.

No official patch or remediation is currently documented. Users should immediately uninstall version 3.3.2 of the orchestr8-platform package and avoid using this compromised version. Exercise caution during cleanup as the malware may perform destructive actions. Monitor for any suspicious activity related to package publishing credentials and GitHub tokens. Check vendor or PyPI advisories for updates or official remediation guidance.