MalwarePublished 6 Jun 2026Updated 9 Jul 2026

orchestr8-platform (PyPI) · Malicious Code

Affects orchestr8-platformSource GCVE Database

Malicious package : remove orchestr8-platform and rotate any secrets on hosts that installed it.

Data as of 11 Jul 2026, 09:43 UTC

Classification

Malicious package

Published to PyPI · OSV MAL-2026-5321

What to do

Remove orchestr8-platform from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
PyPIorchestr8-platform	Affected =3.3.2	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (7d9526ae43236ac15964b307175384455975ace26d8157ef3c41ed8db8192562) The package was found to contain malicious code or consuming dependency that contains malicious code ## Source: kam193 (6b28e6bb345bcdb4726198079a56fcbbb0e73d4d2309c1927c0c8803d515232f) Versions 3.3.2 were compromised. Compromised packages start an obfuscated infostealer. The infostealer is a heavily obfuscated JavaScript code executed using Bun runtime on Python startup. It collectes all kinds of sensitive data, including API keys, credentials to package repositories, cryptocurrency assets, password manager data. Infostealer actively queries online services to collect additional secrets as well as attempts to gain persistence and spread further by publishing infected packages using collected credentials. Data are exfiltrated likely using Github. The code seems to threaten to wipe the user's data if it detects invalid GitHub tokens. Cleanup should be done with caution. It seems to be related to the recent Mini Shai Hulud campaign. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-06-compr-woodpecker Reasons (based on the campaign): - compromised-package - exfiltration-env-variables - exfiltration-cloud-tokens - exfiltration-credentials - abuses-pth - obfuscation - infostealer - The package contains code to detect if it is running in a sandbox environment. - exfiltration-crypto - files-exfiltration - destructive-actions

Impact

Sensitive data including API keys, credentials for package repositories, cryptocurrency assets, and password manager data can be stolen. The malware can propagate by publishing infected packages using stolen credentials, potentially affecting other users. It may also perform destructive actions such as wiping user data if certain conditions are met. This poses a significant risk to confidentiality, integrity, and availability of affected systems and data.

Defensive guidance

Users should immediately uninstall version 3.3.2 of the orchestr8-platform package and avoid using this compromised version. Exercise caution during cleanup as the malware may perform destructive actions. Monitor for any suspicious activity related to package publishing credentials and GitHub tokens. Check vendor or PyPI advisories for updates or official remediation guidance.

Summary

The orchestr8-platform PyPI package version 3.3.2 was compromised to include an obfuscated JavaScript infostealer executed with the Bun runtime during Python startup. The malware collects a wide range of sensitive information including environment variables, cloud tokens, credentials, and cryptocurrency data. It actively queries online services to gather additional secrets and attempts to maintain persistence and spread by publishing infected packages using stolen credentials. The exfiltration mechanism likely involves GitHub. The code also contains destructive functionality that may wipe user data if invalid GitHub tokens are detected. This compromise is associated with the Mini Shai Hulud campaign and exhibits multiple malicious behaviors such as sandbox detection, obfuscation, and file exfiltration.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 10 Jul 2026, 09:42 UTC

Technical details

References

Community reviews