Supply-chain threat intelligence
Incident detail
Risk score
92
AI summary
Indexed incident for ai-perf-toolkit (pypi).
Description
During import, the package starts cryptomining for a hardcoded wallet. The mining software has to already be installed.
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2026-07-ai-perf-toolkit
Reasons (based on the campaign):
- cryptominer
Technical details
Affected versions
=2.4.2
Indicators
- affected version=2.4.275%
Timeline
- Advisory published
- Indexed by ThreatPkg