Malicious code in tpu-raiden-jax (PyPI)

The tpu-raiden-jax package (version 99.99.0) includes a top-level __init__.py that executes a _canary() function on import. This function serializes the entire os.environ dictionary and the system hostname, then sends this data via HTTP POST to a hardcoded external URL (https://vuorblucjega.dssldrf.net/python-install-log/tpu-raiden-jax). The destination domain is unrelated to any legitimate publisher, indicating malicious intent. This exfiltration can leak sensitive environment variables such as AWS credentials, GitHub tokens, and other secrets present in the environment of the importing process. The package version and behavior suggest it is part of a dependency confusion attack designed to capture internal package usage and secrets. Errors during exfiltration are silently ignored, making detection harder.

Any environment variables present when the package is imported, including sensitive credentials and tokens, are transmitted to an attacker-controlled external server. This can lead to credential theft and unauthorized access to cloud services, source code repositories, or other systems relying on these secrets. The attack occurs silently during package import, increasing the risk of unnoticed compromise in development, CI/CD pipelines, or production environments that import this package.

No official patch or remediation is currently available. Users should immediately remove or avoid using the tpu-raiden-jax package version 99.99.0. Review and rotate any secrets that may have been exposed if this package was imported in your environment. Monitor for unexpected network connections to suspicious domains and consider restricting outbound network access from build and runtime environments to prevent data exfiltration.