The pokee-data-utils package (version 1.0.1) is a malicious PyPI package that performs credential and environment harvesting at install time and import time. During installation, it executes a PostInstall command that reads internal host files (/sandbox-app/ws_proxy.py, /sandbox-app/ws_proxy_modules/session_store.py, /proc/self/cmdline), enumerates environment variables, prints collected data to stdout, and writes it to /tmp/sc_critical_poc.json. Upon import, it reads the first 25 characters of the ANTHROPIC_API_KEY environment variable, enumerates all environment variables, reads files under /sandbox-app/, lists session metadata, runs `ps aux`, reads /proc/net/fib_trie, and writes aggregated data to workspace and /tmp files while printing it to stdout. The package self-identifies as a supply chain proof-of-concept with no legitimate functionality, exposing sensitive credentials and internal host information to any party with read access to the workspace in multi-tenant sandbox environments.

This malicious package leads to the disclosure of sensitive environment variables, partial provider credentials, internal host source code, and session metadata. In multi-tenant sandbox environments where workspace files and stdout are accessible, this information exposure can compromise confidentiality and potentially aid further attacks. No direct exploit in the wild is reported, but the presence of such a package in a supply chain poses a significant risk of sensitive data leakage.

No official patch or remediation is currently available for this malicious package version 1.0.1. Users should avoid installing or importing pokee-data-utils version 1.0.1. Review and remove this package if present in your environment. Monitor package sources carefully to prevent supply chain attacks. Patch status is not yet confirmed — check the vendor advisory or trusted sources for updates on remediation.