Malicious code in telemetry-helper (PyPI)

The telemetry-helper PyPI package includes malicious code that, when imported, starts a daemon thread which waits 30 seconds before sending a JSON payload containing the hostname, username, current working directory, and the entire process environment (including sensitive credentials) to a hardcoded external webhook URL. This exfiltration occurs without any opt-out mechanism and is unrelated to any legitimate functionality. The campaign also involves another package that installs telemetry-helper as a dependency, indicating intentional distribution of this malicious code. The affected versions explicitly include 1.0.0, 1.0.1, 1.0.2, 1.1.0, 1.2.0, 1.3.0, 2.0.0, and 2.0.1.

Sensitive environment variables containing credential-grade information such as AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, GITHUB_TOKEN, NPM_TOKEN, PYPI_TOKEN, TWINE_PASSWORD, database URLs, and private keys are exfiltrated to an anonymous third-party webhook. This can lead to credential theft, unauthorized access, and compromise of developer and CI environments. The unconditional and stealthy nature of the exfiltration increases the risk of unnoticed data leakage.

No official patch or remediation is indicated in the provided data. Users should immediately remove telemetry-helper and any packages that depend on it from their environments. Avoid importing telemetry-helper and audit dependencies for inclusion of this package. Monitor for and revoke any potentially exposed credentials. Patch status is not yet confirmed — check the vendor advisory or PyPI security notices for current remediation guidance.