axiom-dragon-xyz PyPI malware — install-time infostealer exfiltrates crypto wallet and cloud credential files
Severity: critical · Patch status: no-fix-needed · Since 2026-11-13
The PyPI package axiom-dragon-xyz version 1.0.4 is confirmed malware, published to the GitHub Advisory Database on 2026-11-13 as part of the 2026-11-axiom-dragon-xyz campaign. The package overrides the install command in setup.py so malicious code executes during pip installation. It acts as an infostealer, exfiltrating sensitive files used by cryptocurrency wallets and files storing cloud credentials, with obfuscation used to evade detection. Anyone who installed version 1.0.4 is affected; there are no patched versions and the package should not be used. Detection credited to kam193 via the OpenSSF malicious-packages database.
What to do
- Check environments and lockfiles for axiom-dragon-xyz (version 1.0.4) and uninstall it immediately if present
- Treat any machine where it was installed as compromised: rotate cloud provider credentials, API keys, and all cryptocurrency wallet keys/seeds stored on or accessible from the host
- Review access logs and exfiltration indicators on affected hosts; audit for unauthorized cloud resource use or wallet transactions
- Block the package in internal PyPI mirrors, artifact repositories, and CI pipelines
- Prefer --no-build-isolation awareness: pin dependencies and use hash verification to prevent install-script execution from unknown packages
Sources
All live incidents on Threat Watch
