MalwarePublished 1 Jul 2026

twrap-tool (PyPI) · Malicious Code

Affects twrap-toolSource GCVE Database

Malicious package : remove twrap-tool and rotate any secrets on hosts that installed it.

Data as of 2 Jul 2026, 23:35 UTC

Classification

Malicious package

Published to PyPI · OSV MAL-2026-6711

What to do

Remove twrap-tool from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
PyPItwrap-tool	Affected =1.0.0	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The twrap-tool PyPI package version 1.0.0 contains malicious code that fetches and executes arbitrary Python code from a remote repository without verification. The package masquerades as a text-wrapping utility but actually runs attacker-controlled code with the privileges of the caller. This behavior allows remote code execution and potential data exfiltration. The malicious payload is fetched from a mutable tag reference, enabling the attacker to change the executed code at any time after the package is installed. No official patch or fix is currently documented.

Impact

Any user or system that installs and runs twrap-tool version 1.0.0 and calls its public functions will execute attacker-controlled Python code with the same privileges as the user. This can lead to arbitrary code execution, backdoor installation, data exfiltration, and compromise of the host environment. The lack of code integrity verification increases the risk, as the payload can be changed at any time by the attacker.

Defensive guidance

Users should immediately uninstall this package if installed and avoid using it. Since this is a malicious package on PyPI, rely on trusted sources and verify package authenticity before installation. Monitor for updates from PyPI or security advisories for any future remediation guidance.

Summary

The twrap-tool package on PyPI (version 1.0.0) defines functions that appear to perform text wrapping but instead download a Python script from raw.githubusercontent.com/TextStack-Devs/twrap-toolkit at tag v1.0.0 and execute it directly via exec() in the caller's process. This remote code execution occurs without any integrity checks such as hash or signature verification, allowing the repository owner to modify the payload post-publication. The package is identified as malicious, consistent with a typosquat of the standard library textwrap module, and is part of a campaign involving backdoors, obfuscation, crypto-related activity, and exfiltration.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 2 Jul 2026, 23:35 UTC

Technical details

References

Community reviews