NIST deprecates RSA-2048 from 2030. Find every one of them before attackers do.
Part of a larger attack: 2025-03-blackwolf published 8 malicious packages. See the full campaign →
Malicious package

bbllaacckkwwoollff-6ad8f762-1a91-45d7-a9c5-356bd858356aPyPI

Advisory published Updated

bbllaacckkwwoollff-6ad8f762-1a91-45d7-a9c5-356bd858356a is a confirmed malicious PyPI package (MAL-2025-3431) that steals credentials and exfiltrates sensitive data (malicious versions 0.1, 0.2). Do not install it — remove it immediately and rotate any exposed credentials.

Malicious code in bbllaacckkwwoollff-6ad8f762-1a91-45d7-a9c5-356bd858356a (PyPI)

MAL-2025-3431
Immediate action
Remove the package, then rotate any secrets the build/runtime could reach.
pip uninstall bbllaacckkwwoollff-6ad8f762-1a91-45d7-a9c5-356bd858356a

What this malware does

During installation, the code either exfiltrate some information about the system or download and execute remote code

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2025-03-blackwolf

Reasons (based on the campaign):

  • The package overrides the install command in setup.py to execute malicious code during installation.

  • exfiltration-generic

  • Downloads and executes a remote malicious script.

Malicious versions

2 flagged
0.10.2

Indicators of compromise (SHA-256)

7362714843387dffdd9aa97a38edfff2bf47756e8f92f69a2df0e713739a9852
ca71f8fd9d4d0839564f1a52e8a8353328f7b5d54077156c15f5cea8b4cb7fcd
4da60ab5fd2248194d9c485e99360f30cd77d89de065b6f30259328cfcadd2f2
f4215a2ca2f0b9eebd4210c0de1f850ec88b52feaba36ba4edaaed61f6c53ffa
d1eb232d31643c4b12409b48f9a00073531e721aee26b9fde12c7cee0bacffe6

Detection & response playbook

Credential / info stealer

  1. Find it

    Search your lockfiles and build artifacts for bbllaacckkwwoollff-6ad8f762-1a91-45d7-a9c5-356bd858356a (2 malicious versions).

  2. If you installed it — respond

    bbllaacckkwwoollff-6ad8f762-1a91-45d7-a9c5-356bd858356a is built to steal secrets, so assume every credential the build or runtime could read is compromised. Remove it from your project and lockfile, then rotate ALL exposed secrets — npm/registry tokens, cloud keys, CI/CD secrets, SSH keys, and any .env values — from a known-clean machine. Audit logs for unauthorized use of those credentials.

  3. Did it already run?

    If bbllaacckkwwoollff-6ad8f762-1a91-45d7-a9c5-356bd858356a was installed, its post-install payload may already have run. Removing the package does not undo that — check outbound connections and credential use from the install window onward.

Frequently asked questions

No. bbllaacckkwwoollff-6ad8f762-1a91-45d7-a9c5-356bd858356a on PyPI has been identified as a malicious package (versions 0.1, 0.2 flagged). It should be removed immediately — do not install or keep it in your dependency tree.

Campaign

RLMA-2025-024902025-03-blackwolfRLUA-2026-00137

References

Credits

  • Kamil Mańkowski (kam193)
  • ReversingLabs · finder

Detect & block this

O3 blocks bbllaacckkwwoollff-6ad8f762-1a91-45d7-a9c5-356bd858356a-class packages before install and in CI — and if it already ran, its runtime egress monitoring catches the credential exfiltration and severs the channel.

Malware detection Runtime egress monitoring

Explore

All malware advisories How O3 detects malware Vulnerability database
bbllaacckkwwoollff-6ad8f762-1a91-45d7-a9c5-356bd858356a (PyPI) malicious package — MAL-2025-3431 | O3 Security