The compromised uprobe PyPI package installs a .pth file that auto-loads on Python startup, aliasing standard library modules to obfuscated names and executing a payload guarded by a sentinel file. This payload downloads the Bun JavaScript runtime from GitHub, sets execution permissions, and runs a bundled obfuscated JavaScript infostealer. The infostealer collects a wide range of sensitive information including environment variables, cloud tokens, credentials, cryptocurrency assets, and password manager data. It also attempts to gain persistence and spread by publishing infected packages using stolen credentials. The malware includes destructive capabilities, threatening data wiping if invalid GitHub tokens are detected. This campaign is linked to the Mini Shai Hulud campaign and exhibits canonical evasion techniques such as obfuscation, sandbox detection, and execution outside build isolation.

Sensitive data including API keys, package repository credentials, cryptocurrency assets, and password manager information can be stolen. The malware can exfiltrate data likely via GitHub and attempts to maintain persistence and propagate by publishing infected packages. There is a risk of destructive actions such as data wiping if invalid GitHub tokens are detected. This compromises the confidentiality and integrity of affected systems and user data.

No official patch or remediation is currently documented. Users should immediately uninstall versions 0.1.3 and 0.1.4 of the uprobe package. Inspect systems for presence of the /tmp/.bun_ran sentinel file and the Bun runtime in /tmp/b/bun, and remove any related files. Exercise caution during cleanup due to potential destructive payloads. Monitor for suspicious package publishing activity using stolen credentials. Check vendor advisories or PyPI security notices for updates or official remediation guidance.