Malicious code in sherpy (PyPI)
The sherpy package on PyPI is a malicious tool disguised as an OSINT command-line utility. It contains a large precompiled native module that performs stealthy exfiltration of sensitive user data, including wallet keystores and Telegram files, to an attacker-controlled Telegram bot. The malicious behavior is hidden inside a compiled binary with no source code, preventing easy detection through source review. The package versions 0.1.0 and 0.1.1 are affected.
AI Analysis
Technical Summary
The sherpy package ships its functionality inside a 10.8 MB precompiled PyO3 native module, which includes dependencies for Telegram bot communication, HTTP requests, filesystem enumeration, archiving, and cryptographic operations. The package's CLI triggers functions that enumerate the user's home directory, collect cryptocurrency wallet keystores and credential files, package them, and exfiltrate them to a hardcoded Telegram bot token and chat ID. This exfiltration targets Chrome extension files and Telegram data, indicating a focus on stealing cryptocurrency-related information. The malicious code is concealed within the native module, making detection via source code analysis ineffective.
Potential Impact
Users who install and run the sherpy package versions 0.1.0 or 0.1.1 risk having sensitive wallet credentials and Telegram files exfiltrated to an attacker-controlled Telegram bot. This can lead to theft of cryptocurrency assets and compromise of Telegram communications. The package's malicious behavior is hidden in a compiled native module, increasing the risk of unnoticed data theft.
Mitigation Recommendations
No official patch or remediation is currently available for the sherpy package. Users should immediately uninstall sherpy versions 0.1.0 and 0.1.1 if installed. Avoid installing packages from untrusted sources or those that include opaque native modules without source code. Monitor for any suspicious Telegram bot activity related to credential exfiltration. Since this is a malicious package, do not run its CLI or any of its components.
Malicious code in sherpy (PyPI)
Description
The sherpy package on PyPI is a malicious tool disguised as an OSINT command-line utility. It contains a large precompiled native module that performs stealthy exfiltration of sensitive user data, including wallet keystores and Telegram files, to an attacker-controlled Telegram bot. The malicious behavior is hidden inside a compiled binary with no source code, preventing easy detection through source review. The package versions 0.1.0 and 0.1.1 are affected.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The sherpy package ships its functionality inside a 10.8 MB precompiled PyO3 native module, which includes dependencies for Telegram bot communication, HTTP requests, filesystem enumeration, archiving, and cryptographic operations. The package's CLI triggers functions that enumerate the user's home directory, collect cryptocurrency wallet keystores and credential files, package them, and exfiltrate them to a hardcoded Telegram bot token and chat ID. This exfiltration targets Chrome extension files and Telegram data, indicating a focus on stealing cryptocurrency-related information. The malicious code is concealed within the native module, making detection via source code analysis ineffective.
Potential Impact
Users who install and run the sherpy package versions 0.1.0 or 0.1.1 risk having sensitive wallet credentials and Telegram files exfiltrated to an attacker-controlled Telegram bot. This can lead to theft of cryptocurrency assets and compromise of Telegram communications. The package's malicious behavior is hidden in a compiled native module, increasing the risk of unnoticed data theft.
Mitigation Recommendations
No official patch or remediation is currently available for the sherpy package. Users should immediately uninstall sherpy versions 0.1.0 and 0.1.1 if installed. Avoid installing packages from untrusted sources or those that include opaque native modules without source code. Monitor for any suspicious Telegram bot activity related to credential exfiltration. Since this is a malicious package, do not run its CLI or any of its components.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- MAL-2026-17188
- Osv Schema Version
- 1.7.4
- Ecosystems
- ["PyPI"]
Threat ID: 6abb41a4f7a7c54106cc3914
Added to database: 09/29/2026, 04:42:12 UTC
Last enriched: 09/29/2026, 04:57:43 UTC
Last updated: 09/29/2026, 18:00:18 UTC
Views: 13
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.