MalwarePublished 4 Jul 2026Updated 8 Jul 2026

yt-api-dlp (PyPI) · Malicious Code

Affects yt-api-dlpSource GCVE Database

Malicious package : remove yt-api-dlp and rotate any secrets on hosts that installed it.

Data as of 26 Oct 2026, 15:56 UTC

Classification

Malicious package

Published to PyPI · OSV MAL-2026-6754

What to do

Remove yt-api-dlp from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
PyPIyt-api-dlp	Affected =0.1.0 =0.1.1	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

--- _-= Per source details. Do not edit below this line.=-_ ## Source: kam193 (c3b9ca286cef4b241ded9603c192ce5b13e155cad9b017ee3f89b98674065374) During import, this malicious copy of a legitimate package downloads an encrypted data disguise as an image. It contains an archive with a next-stage script that uses the Polygon blockchain (contract 0xC7c9026a3a7e27ec6Ce2D09B19FC1FB4bc978BBb) to get the C2 address. The script then communicates with C2 over an encrypted channel to get further commands and ensures persistence. C2 delivers an executable that is executed by loading it into the memory of another process. During analysis, the encryption key and delivered binary contained test data suggesting the author experiments with building a botnet. The package has been briefly used as dependency of a Github project. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-07-yt-api-dlp Reasons (based on the campaign): - peristence-autorun - Downloads and executes a remote malicious script. - clones-real-package - persistence - data-from-blockchain - custom-crypto

Impact

The malicious package can lead to remote code execution on systems that import it, enabling attackers to establish persistent control. The use of blockchain to retrieve C2 addresses complicates detection and takedown. The delivered payload runs in memory, potentially evading traditional file-based detection. The overall impact includes unauthorized system compromise, potential data theft, and use of infected systems in a botnet.

Defensive guidance

The best mitigation is to avoid installing or using yt-api-dlp versions 0.1.0 and 0.1.1 from PyPI. Remove any installations of this package immediately. Verify dependencies in projects to ensure no indirect inclusion of this malicious package. Monitor supply chain dependencies carefully to prevent inclusion of trojanized packages.

Summary

This threat involves a malicious PyPI package named yt-api-dlp, specifically versions 0.1.0 and 0.1.1. The package acts as a trojanized clone of a legitimate package. When imported, it downloads an encrypted archive disguised as an image file. This archive contains a next-stage script that leverages the Polygon blockchain smart contract (0xC7c9026a3a7e27ec6Ce2D09B19FC1FB4bc978BBb) to obtain the C2 server address. The malware establishes an encrypted communication channel with the C2 to receive commands and maintain persistence. The C2 server sends an executable payload that is injected into another process's memory for execution. Test data in the payload suggests the author is developing botnet capabilities. The package was briefly used as a dependency in a GitHub project, increasing exposure risk.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 4 Jul 2026, 22:36 UTC

Technical details

References

Community reviews