Incident detail

criticalpypi·crypto miner·github

Malicious code in xxlsxwriter (PyPI)

xxlsxwriter

Published Jul 21, 2026, 05:24 PM

Risk score

AI summary

Indexed incident for xxlsxwriter (pypi).

Description

Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet addresses

Credit: OpenSSF (source)

Technical details

Indicators

ghsa
95%

Timeline

Jul 21, 05:24 PMAdvisory published
Aug 1, 06:08 AMIndexed by ThreatPkg

Related incidents

Malicious code in mcp-search-server (PyPI)mcp-search-server92
Malicious code in ai-perf-toolkit (PyPI)ai-perf-toolkit92
Malicious code in ygame (PyPI)ygame92
Malicious code in ysocks (PyPI)ysocks92
Malicious code in yper (PyPI)yper92