Which versions of raydium-sdk are malicious?

The following PyPI versions of raydium-sdk are flagged malicious: 2.1.2, 2.1.3. Treat any of these as compromised.

How do I remediate raydium-sdk if I installed it?

raydium-sdk is built to steal secrets, so assume every credential the build or runtime could read is compromised. Remove it from your project and lockfile, then rotate ALL exposed secrets — npm/registry tokens, cloud keys, CI/CD secrets, SSH keys, and any .env values — from a known-clean machine. Audit logs for unauthorized use of those credentials.

I already installed raydium-sdk — how do I know if it already compromised me?

If raydium-sdk was installed, its post-install payload may already have run. Removing the package does not undo that — check outbound connections and credential use from the install window onward.

Is raydium-sdk part of a known attack campaign?

Yes — raydium-sdk is associated with the spl-types-rentry-2024-07 campaign. Packages in the same campaign often share infrastructure and payloads, so check whether any related packages are also in your dependency tree.

How do I find raydium-sdk across my projects, lockfiles, and CI pipelines?

Search your lockfiles and build artifacts for raydium-sdk (2 malicious versions).

Malicious package

raydium-sdkPyPI

Advisory published Jul 3, 2024Updated Dec 12, 2025

raydium-sdk is a confirmed malicious PyPI package (MAL-2024-12337) that steals credentials and exfiltrates sensitive data (malicious versions 2.1.2, 2.1.3). Do not install it — remove it immediately and rotate any exposed credentials.

Malicious code in raydium-sdk (PyPI)

MAL-2024-12337

Immediate action

Remove the package, then rotate any secrets the build/runtime could reach.

pip uninstall raydium-sdk

What this malware does

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: spl-types-rentry-2024-07

Reasons (based on the campaign):

infostealer
crypto-related

Malicious versions

2 flagged

2.1.22.1.3

Indicators of compromise (SHA-256)

0869872f7dde25082ccdbd8177a11a615a120f8ac05ec6d2278122cbaeba8c92

e485f39cf4f7255533241d5feba7f3d2bb7b80f37adde2d0a2046c838bfd4fef

2eeeb03856ba85c71edc150009f4ca1a7ac8b99cf1554bfb01c68445eb177297

Detection & response playbook

Credential / info stealer

Find it
Search your lockfiles and build artifacts for raydium-sdk (2 malicious versions).
If you installed it — respond
raydium-sdk is built to steal secrets, so assume every credential the build or runtime could read is compromised. Remove it from your project and lockfile, then rotate ALL exposed secrets — npm/registry tokens, cloud keys, CI/CD secrets, SSH keys, and any .env values — from a known-clean machine. Audit logs for unauthorized use of those credentials.
Did it already run?
If raydium-sdk was installed, its post-install payload may already have run. Removing the package does not undo that — check outbound connections and credential use from the install window onward.

Frequently asked questions

No. raydium-sdk on PyPI has been identified as a malicious package (versions 2.1.2, 2.1.3 flagged). It should be removed immediately — do not install or keep it in your dependency tree.

Campaign

spl-types-rentry-2024-07

References

Credits

Kamil Mańkowski (kam193)

Detect & block this

O3 blocks raydium-sdk-class packages before install and in CI — and if it already ran, its runtime egress monitoring catches the credential exfiltration and severs the channel.

Malware detection Runtime egress monitoring

Explore

All malware advisories How O3 detects malware Vulnerability database