Malicious code in coldcard-helpers (PyPI)

Source: kam193 127a096109f7b5b2bbedf7f6a9fc2e7baa706e93704ebd52615e744a9838fbc3 When installing the package or importing the module, code starts a background task collecting sensitive data, like sensitive environment variables, private keys for cryptocurrency wallets, SSH keys, and so on to a...

Malicious Package

Overview coldcard-helpers is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...