Your RSA-2048 keys break in 2030. Find every one of them before attackers do.See CBOMkit
Malicious package campaign
2025-04-tronix
The 2025-04-tronix campaign published 61 malicious PyPI packages. See the full package list, timeline, and how to check whether your dependency tree pulled any of them in.
Malicious packages
61
Advisories
61
Ecosystem
PyPI
First seen
2025-04-28
What to do if you depend on any of these
Every package below was published as malicious under 2025-04-tronix. Treat any machine that installed one as compromised: remove the package and its lockfile entry, rotate every credential the build or runtime could reach (registry tokens, cloud keys, CI/CD secrets, SSH keys, and any .env values) from a known-clean machine, and audit for unexpected outbound activity.
Because the packages share a campaign, a project that pulled in one has an elevated chance of having pulled in others. Search your lockfiles for 2025-04-tronix rather than checking a single package name.
All 61 packagesPyPI
- hexadecView advisory →
- hexadecpyView advisory →
- hexconView advisory →
- hexdecView advisory →
- hexdeciView advisory →
- hexdecimalView advisory →
- hexdecliView advisory →
- hexdeclinkView advisory →
- hexdecnetView advisory →
- hexdecpyView advisory →
- tronapinetView advisory →
- tronapipyView advisory →
- troncloudView advisory →
- trondecView advisory →
- trongapView advisory →
- trongapyView advisory →
- trongithpyView advisory →
- trongitpyView advisory →
- trongridapiView advisory →
- trongridenView advisory →
- trongriderView advisory →
- trongridevView advisory →
- trongridlibView advisory →
- trongridmeView advisory →
- trongridmyView advisory →
- trongridpermView advisory →
- trongridwebView advisory →
- trongridyView advisory →
- tronhapView advisory →
- tronhapyView advisory →
- tronhexView advisory →
- tronhexpyView advisory →
- tronixView advisory →
- tronjoiView advisory →
- tronkeepView advisory →
- tronkeeppyView advisory →
- tronkeypyView advisory →
- tronkeyspyView advisory →
- tronlabView advisory →
- tronlabpy3View advisory →
- tronlastView advisory →
- tronlastpyView advisory →
- tronlibView advisory →
- tronlibapiView advisory →
- tronlibpyView advisory →
- tronlidView advisory →
- tronlinknetView advisory →
- tronlixView advisory →
- tronpadView advisory →
- tronpakView advisory →
- tronpathView advisory →
- tronpropyView advisory →
- tronpyapiView advisory →
- tronsevView advisory →
- tronwalletpyView advisory →
- tronweView advisory →
- tronwebwpyView advisory →
- trxoneView advisory →
- trxtwoView advisory →
- wallettronView advisory →
- wallettronpyView advisory →