Cybersecurity firm: malware capable of stealing cryptocurrencies found in index of Python packages

On October 13, researchers at cybersecurity firm Checkmarx raised an alert about a dangerous piece of malware uploaded to the Python Package Index (PyPI) that steals private keys and, according to the firm, was automatically uploaded by suspicious users through several different packages designed to mimic popular wallets such as MetaMask, Atomic, TronLink, Ronin, and other popular wallets and other industry staples.

The malware is cleverly embedded into various parts of the software packages. Since the malware appears to be harmless code, it is largely undetectable. Upon closer inspection, however, specific portions of the data allow hackers to take control of cryptocurrency wallets and transfer funds once an unsuspecting user invokes a specific function embedded in the software package.