Malicious PyPI package claudeopusfile — steganographic infostealer with blockchain-based C2 (no CVE)
Severity: critical · Patch status: no-fix-needed · Since 2026-10-26
GitHub Advisory Database (GHSA-jgm6-7jxr-97gx, published 2026-10-26) flags the PyPI package claudeopusfile as malicious. Versions 0.1.1 and 0.1.2 contain obfuscated install-time code that fetches a payload hidden in an image via steganography — a Python application with a native extension module harboring an infostealer. The malware collects sensitive data, includes sandbox-detection, downloads and executes remote executables, and exfiltrates to a C2 server whose address is retrieved from Polygon blockchain transaction history (c2-in-blockchain). It is part of the 2026-09-donutautosellsrc campaign. There are no patched versions; the package is malware and should be removed, not upgraded. Anyone who installed it should treat credentials and secrets on the host as compromised.
What to do
- Remove claudeopusfile from all environments and block it in dependency resolution
- Rotate all credentials, tokens, SSH keys, and secrets accessible from affected machines
- Rebuild affected systems from trusted images; audit for persistence and downloaded executables
- Review install logs and CI caches for exposure; check Polygon address 0x9c0a507300fd902787bb193d80fca5ce6e1bff9a and VirusTotal hash d03c42c275f0dbc617428441508c49ae1adcbbc95af4eeb094bca4e4f8943f3e for indicators
- Scan dependency lockfiles and histories for other packages from the same campaign
Sources
All live incidents on Threat Watch
