MAL-2026-5292
See a problem?- Import Source
- https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/bittensor-burn-watch/MAL-2026-5292.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MAL-2026-5292
- Published
- 2026-06-07T10:42:34Z
- Modified
- 2026-06-11T04:01:34.824750260Z
- Summary
- Malicious code in bittensor-burn-watch (PyPI)
- Details
-
-= Per source details. Do not edit below this line.=-
Source: amazon-inspector (16180f1609731d35398f11dbfcb328826d2e39a7acf42fc256b563512645e6e5)
Package advertises itself as a Bittensor subnet burn-rate monitor but bundles a live TELEGRAMBOTTOKEN and TELEGRAMCHATID in bittensorburnwatch/defaults.env that the maintainer's own example file labels as 'Clipboard alerts (admin Telegram)' and notes 'Pip users get these automatically — they do not edit these themselves'. The Telegram chat ID is admin-controlled, so every installer's outbound alert traffic is routed to a destination the maintainer owns and the installer cannot see or change. All actual functionality lives in two Cython-compiled.so files (core.cpython-310-x8664-linux-gnu.so 6.2 MB and burnwatch.*.so 2.3 MB); the only readable Python is a 107-byte init.py and a 77-byte main.py that re-export
mainfrom the compiled binary. With a python-xlib dependency on Linux providing X11 clipboard/selection access, the binary-only distribution prevents installers from auditing what data the package reads from their machine and sends to the maintainer's Telegram. Independently, defaults.env also ships a live third-party Taostats API key (tao-e9b3d1d9-...) to every installer, marked 'bundled; users never set this' — this both leaks the maintainer's own quota/billing identity and turns every install into a free proxy for that account. The combination of hardcoded maintainer-owned destination, 'clipboard alerts' framing in the maintainer's own documentation, advertised purpose (burn monitoring) that does not require clipboard access, and unreviewable compiled-binary logic constitutes a silent-relay supply-chain risk.Source: kam193 (37d97a9ef438df1fa515bb24b5258267bc116057a0c8bcc25c4407ed0bfe477c)
The package contains code to steal clipboard content to a predefined remote location. If run in the right way, the code will periodically check the clipboard and if the content matches the pattern, exfiltrates it. Early versions contain this behavior mentioned in the README. The targeted data are likely cryptocurrency secret seed phrases.
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2026-06-clip-logger
Reasons (based on the campaign):
clipboard-stealing
crypto-related
- Database specific
{ "malicious-packages-origins": [ { "source": "kam193", "id": "pypi/2026-06-clip-logger/bittensor-burn-watch", "sha256": "2d14823eef05f1b18d12e55b6d304d1752bd14f031fec2b118d7f6e41c11728e", "import_time": "2026-06-07T11:14:54.020826348Z", "versions": [ "1.2.0", "1.2.2", "1.2.3", "1.2.4", "1.2.5", "1.2.6", "1.2.7", "1.2.9", "1.2.10", "1.2.11", "1.2.12", "1.3.0", "1.3.1", "1.3.2", "1.3.3", "1.3.4" ], "modified_time": "2026-06-07T10:42:34.430922Z" }, { "source": "kam193", "id": "pypi/2026-06-clip-logger/bittensor-burn-watch", "sha256": "98e0edb926b62e00e305dc5645c51c236e758c540b80f6b8342eb2e30f09ff39", "import_time": "2026-06-07T12:05:39.808251349Z", "versions": [ "1.2.0", "1.2.2", "1.2.3", "1.2.4", "1.2.5", "1.2.6", "1.2.7", "1.2.9", "1.2.10", "1.2.11", "1.2.12", "1.3.0", "1.3.1", "1.3.2", "1.3.3", "1.3.4" ], "modified_time": "2026-06-07T11:21:39.758017Z" }, { "source": "kam193", "id": "pypi/2026-06-clip-logger/bittensor-burn-watch", "sha256": "fda53f5e1f6801ab6428db512a95f5ef80e088ea5fc7004a77042e29e8d0faaf", "import_time": "2026-06-07T18:33:06.827790536Z", "versions": [ "1.2.0", "1.2.2", "1.2.3", "1.2.4", "1.2.5", "1.2.6", "1.2.7", "1.2.9", "1.2.10", "1.2.11", "1.2.12", "1.3.0", "1.3.1", "1.3.2", "1.3.3", "1.3.4" ], "modified_time": "2026-06-07T17:23:11.980474Z" }, { "source": "kam193", "id": "pypi/2026-06-clip-logger/bittensor-burn-watch", "sha256": "f638ddd895813aaf04513578baea50f1db2f3b30c942c3bbdafff09291c3c3d1", "import_time": "2026-06-07T19:34:38.337052788Z", "versions": [ "1.2.0", "1.2.2", "1.2.3", "1.2.4", "1.2.5", "1.2.6", "1.2.7", "1.2.9", "1.2.10", "1.2.11", "1.2.12", "1.3.0", "1.3.1", "1.3.2", "1.3.3", "1.3.4" ], "modified_time": "2026-06-07T19:03:28.349716Z" }, { "source": "kam193", "id": "pypi/2026-06-clip-logger/bittensor-burn-watch", "sha256": "f87f652b9c515c72af5e8404a381465061ea6b109d3444e1afc14aae0bd8518f", "import_time": "2026-06-07T20:31:39.524206499Z", "versions": [ "1.2.0", "1.2.2", "1.2.3", "1.2.4", "1.2.5", "1.2.6", "1.2.7", "1.2.9", "1.2.10", "1.2.11", "1.2.12", "1.3.0", "1.3.1", "1.3.2", "1.3.3", "1.3.4" ], "modified_time": "2026-06-07T19:24:38.658811Z" }, { "source": "kam193", "id": "pypi/2026-06-clip-logger/bittensor-burn-watch", "sha256": "ea0bf99f674df3306bc4ba5df47570c415de982776feed856e3bbc539c439cf7", "import_time": "2026-06-07T21:31:01.53407222Z", "versions": [ "1.2.0", "1.2.2", "1.2.3", "1.2.4", "1.2.5", "1.2.6", "1.2.7", "1.2.9", "1.2.10", "1.2.11", "1.2.12", "1.3.0", "1.3.1", "1.3.2", "1.3.3", "1.3.4" ], "modified_time": "2026-06-07T20:48:58.688234Z" }, { "source": "kam193", "id": "pypi/2026-06-clip-logger/bittensor-burn-watch", "sha256": "9f53f90b2aba94c9979af9b01178c631fd63a7c072bf13a3c59d556ba514a46d", "import_time": "2026-06-08T02:23:16.569966836Z", "versions": [ "1.2.0", "1.2.2", "1.2.3", "1.2.4", "1.2.5", "1.2.6", "1.2.7", "1.2.9", "1.2.10", "1.2.11", "1.2.12", "1.3.0", "1.3.1", "1.3.2", "1.3.3", "1.3.4" ], "modified_time": "2026-06-08T00:57:22.340189Z" }, { "source": "kam193", "id": "pypi/2026-06-clip-logger/bittensor-burn-watch", "sha256": "37d97a9ef438df1fa515bb24b5258267bc116057a0c8bcc25c4407ed0bfe477c", "import_time": "2026-06-08T19:19:19.163221109Z", "versions": [ "1.2.0", "1.2.2", "1.2.3", "1.2.4", "1.2.5", "1.2.6", "1.2.7", "1.2.9", "1.2.10", "1.2.11", "1.2.12", "1.3.0", "1.3.1", "1.3.2", "1.3.3", "1.3.4" ], "modified_time": "2026-06-08T00:57:22.340189Z" }, { "source": "amazon-inspector", "id": "IN-MAL-2026-005454", "sha256": "09280109d38329d198a20caa2a2da9af1f8db4147c48fc5343d52efab6f1ab00", "import_time": "2026-06-11T03:48:53.357822857Z", "versions": [ "1.3.4" ], "modified_time": "2026-06-11T03:22:50Z" }, { "source": "amazon-inspector", "id": "IN-MAL-2026-005455", "sha256": "0bb99d66a772f388538ea3eaef2262158c0d6b3160f25a292e96aeb8edb6c893", "import_time": "2026-06-11T03:48:53.464675075Z", "versions": [ "1.2.10" ], "modified_time": "2026-06-11T03:22:54Z" }, { "source": "amazon-inspector", "id": "IN-MAL-2026-005456", "sha256": "16180f1609731d35398f11dbfcb328826d2e39a7acf42fc256b563512645e6e5", "import_time": "2026-06-11T03:48:53.592598743Z", "versions": [ "1.3.0" ], "modified_time": "2026-06-11T03:22:58Z" } ] }- References
- Credits
-
-
- Amazon Inspector - FINDER
-
- Kamil Mańkowski (kam193) - REPORTER
-
Affected packages
PyPI / bittensor-burn-watch
Package
- Name
- bittensor-burn-watch
- View open source insights on deps.dev
- Purl
- pkg:pypi/bittensor-burn-watch
Affected versions
1.*
1.2.0
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.9
1.2.10
1.2.11
1.2.12
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
Database specific
source
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/bittensor-burn-watch/MAL-2026-5292.json"
cwes
[
{
"cweId": "CWE-506",
"description": "The product contains code that appears to be malicious in nature.",
"name": "Embedded Malicious Code"
},
{
"name": "Embedded Malicious Code",
"description": "The product contains code that appears to be malicious in nature.",
"cweId": "CWE-506"
},
{
"cweId": "CWE-506",
"description": "The product contains code that appears to be malicious in nature.",
"name": "Embedded Malicious Code"
}
]
indicators
{
"evidence_files": [
{
"path": "bittensor_burn_watch/core.cpython-310-darwin.so",
"sha256": "750c7a3f3bbc59f64948389fdd91108a132bbb62f6e879b3516b1d5b6c8a05f9",
"tlsh": "f5f4d666e3be3e01c69bb7bc7b1c42986a0df5a81b38c49e2c1c111cdad5b115a774b3"
},
{
"path": "bittensor_burn_watch/defaults.env",
"sha256": "9d765d7c1621562a0c7710d0b6db8cc3e4544ed25cd58b296eb937803355d905",
"tlsh": "cdd02b12466cfb52ad025d11601aa25d50dd551fbf12c2d0a35b42c7b4514e646fe3a9"
},
{
"sha256": "bac0d9cc4bf3120a47177acb026eaa6fc3e462c5783fcd7f83efdc018552dec2",
"path": "bittensor_burn_watch-1.3.4.dist-info/METADATA",
"tlsh": "dd714122b8c0867d3f45d3776a698b115513c2b46e68b89c30ef41379b8672ac1be239"
}
],
"package_integrity": [
{
"hashes": {
"md5": "9cc8e2a24786355e929930e318f6bb03",
"sha256": "f610e747e1e5ffd48fd68adc484791c19287a5bef8b1441b94eddafe1dc0605e",
"blake2b_256": "0fa160b182d64fe264a65cd878d674da3f398bdf787d14a703eb81eb698d9a80"
},
"filename": "bittensor_burn_watch-1.3.4-cp310-cp310-macosx_11_0_arm64.whl"
},
{
"hashes": {
"md5": "339ba7f1eed4036153762118b083adbe",
"sha256": "b8431fc6cb5cf256c4508063d490fc676c455c4c1a44c6b267e802af0e9d842f",
"blake2b_256": "6958b78040744c4d00d1faf72d95870a598061f12ea6606f85d06e091b7e8bfe"
},
"filename": "bittensor_burn_watch-1.3.4-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
},
{
"hashes": {
"md5": "b0f437d0b1fd43eb3bf8881aa1f19568",
"sha256": "78bfee9432510cca60d6af77997d3c505e8c1599679472221d21c0df9c9df3ed",
"blake2b_256": "d0eb8174f4443a9d2036cb345363836e670269b263de2322bc16eb9b4f5d9ffe"
},
"filename": "bittensor_burn_watch-1.3.4-cp310-cp310-manylinux_2_5_i686.manylinux1_i686.manylinux_2_17_i686.manylinux2014_i686.whl"
},
{
"hashes": {
"md5": "53b2d48a37a378deceb06452bf277716",
"sha256": "cdf15598ddc621f1d719798dbf32bfbd59fdaf4d4883d67675758b40fbee9abd",
"blake2b_256": "122bb15ec6c319b64b0c762ff980cb7fea9ecd28085b08f42d9429de24b3d39a"
},
"filename": "bittensor_burn_watch-1.3.4-cp310-cp310-win32.whl"
},
{
"hashes": {
"md5": "26f0428a25ad4f5a09e68c323d03762d",
"sha256": "89de254f194262470b8c89a82f9e0341c4754ee13bec82af68f97e4a26037e75",
"blake2b_256": "222954a1cdb6550486a97c60406d9dfd518bb84faad739f93487dbd7e2d2fb21"
},
"filename": "bittensor_burn_watch-1.3.4-cp310-cp310-win_amd64.whl"
},
{
"hashes": {
"md5": "fc1d9b938fd801faa13ec408d6ff8e7e",
"sha256": "19b89090632bcd1305d858043d1bca71841d9098e862b4d8503d20d758d91ac9",
"blake2b_256": "89fe675afa3b34616a2499a14073301cbc005ae6a87010dbd45c186b8b2cb4de"
},
"filename": "bittensor_burn_watch-1.3.4-cp311-cp311-macosx_11_0_arm64.whl"
},
{
"hashes": {
"md5": "506e71452f62b5e9ea417824782d2f72",
"sha256": "16332894d13716bd5eb6b0255ddb075add4fe365a5950ab60b33ffb724a6e6dc",
"blake2b_256": "245e53e99213afcacd63048b0b5f3b8d92f79eb894b7b40094ee782d39529771"
},
"filename": "bittensor_burn_watch-1.3.4-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
},
{
"hashes": {
"md5": "723227a87131eb08f289c36107c458ca",
"sha256": "5cf774ca80ecb1c05e1deb5b26b5ddd12edbaff41204a8c4062ed5cb5c015ce9",
"blake2b_256": "ddabc69560e318af2cd2abde44520b0f670f673d2a55464350616797389a1b12"
},
"filename": "bittensor_burn_watch-1.3.4-cp311-cp311-manylinux_2_5_i686.manylinux1_i686.manylinux_2_17_i686.manylinux2014_i686.whl"
},
{
"hashes": {
"md5": "c282250eb2a0c45be9ce39da53ac2549",
"sha256": "ec0b3c459310bc80593d49fe63faefed0556f877ab9c0fa168af9473f01de3d9",
"blake2b_256": "3d4101754f8f23fb421e612050d6e1bef7a448c854c70bd00a8c82c94da5415e"
},
"filename": "bittensor_burn_watch-1.3.4-cp311-cp311-win32.whl"
},
{
"hashes": {
"md5": "8a17ba27bb509990548ffd8ec0b808e1",
"sha256": "4651ab95f214c07e356b5d618ee49ba3864de170b4a29482179c40ac3ff19bb5",
"blake2b_256": "b1937febf0c49cccb2b2661aee42a8dbefea7e20dfe7a940b70e167b4b917e90"
},
"filename": "bittensor_burn_watch-1.3.4-cp311-cp311-win_amd64.whl"
},
{
"hashes": {
"md5": "70ced1ab430593dd616b246f0abd4677",
"sha256": "6bcf14ec989d9cd9ec2da0b844b64db5f923bf8166df13894644091b94cf31fb",
"blake2b_256": "72c96dce8fd42bcad30a096ad250ae4955096ffb1cd306893c8faa11a56f26f5"
},
"filename": "bittensor_burn_watch-1.3.4-cp312-cp312-macosx_11_0_arm64.whl"
},
{
"hashes": {
"md5": "5d28475fb07c924da12317a9afd43395",
"sha256": "dc7024817705cbc12ec7bb000a97a9001732b12ddda2b4f9a5635bdffef13a8e",
"blake2b_256": "ebde1ef5f1f58a6c683b97e7adc7d4b4b31f5053faacae85020be79afb579b08"
},
"filename": "bittensor_burn_watch-1.3.4-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
},
{
"hashes": {
"md5": "7a29fe602f8a1f9688dcf9a977b9d1c3",
"sha256": "728c0db270a7017a1f5d73af79bf55cb2c76d831ce0690647c5557271c21e758",
"blake2b_256": "6a3b915372998208f0d8b1ece3a0b023252e5c20d8b5f0c11742eecf797014eb"
},
"filename": "bittensor_burn_watch-1.3.4-cp312-cp312-manylinux_2_5_i686.manylinux1_i686.manylinux_2_17_i686.manylinux2014_i686.whl"
},
{
"hashes": {
"md5": "42928ad02b4bfe243514aa372ca2bcf6",
"sha256": "af2b86cbb51ecf7b8eff74c33fcfc77bf5a810416028f47bdac3a694aeee0f95",
"blake2b_256": "f77abe596d1ba9eebb6f6573e9a8351b90efb0ce6d3114d61b1d3c8250444fbb"
},
"filename": "bittensor_burn_watch-1.3.4-cp312-cp312-win32.whl"
},
{
"hashes": {
"md5": "d009e6234af0f1ac40b22b42cb08cda3",
"sha256": "425a7ff608075a2e64cdef07b51f1044367ca70a914ae8512547afb19df11f68",
"blake2b_256": "caf0d2e5aa15bfef5846d8ddf6ec2222e2b17a5c9aac7991444c5522df0a0f92"
},
"filename": "bittensor_burn_watch-1.3.4-cp312-cp312-win_amd64.whl"
},
{
"hashes": {
"md5": "1c86281091913fffe8c9a7f1979c8b00",
"sha256": "a7540f63a0e9b87c995479ea892e5317e24aa0ff069bd69fc57d84ff0f6786b9",
"blake2b_256": "3524b5cb39f07f4ad883d316134228e722d53a48ef3dfedd70b42e821d3c21fa"
},
"filename": "bittensor_burn_watch-1.3.4-cp313-cp313-macosx_11_0_arm64.whl"
},
{
"hashes": {
"md5": "f7e73b6b6de4a236de5e19792b6d06bf",
"sha256": "c3c96ee0b8e2a37ef2053a14cfaaf4e7217c6d773afb6b6ad298d49c5c76e6b5",
"blake2b_256": "72bccd96ad84698d2cd7ed08677cb883863385af6140b685d1c2e45be2300dae"
},
"filename": "bittensor_burn_watch-1.3.4-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
},
{
"hashes": {
"md5": "c3b8d8ff42249746cfc1ee0810c90c79",
"sha256": "b3c25adebfe4e3f1924b73dcaedce7cee0d8ef69c51bacd1f395ae1eb40caa58",
"blake2b_256": "d62140fc6e403f2ab829a14fba6f47d68c2325256b16b760e9ef54f46a02887c"
},
"filename": "bittensor_burn_watch-1.3.4-cp313-cp313-manylinux_2_5_i686.manylinux1_i686.manylinux_2_17_i686.manylinux2014_i686.whl"
},
{
"hashes": {
"md5": "6a550150a7a0c29e89f7af13f2b4c71c",
"sha256": "aed2e71bbd7ffd7b1bbe321641c631a6b48bb8492a87a5674583785bfd38d3cb",
"blake2b_256": "e76f5e24083226b70508072d2ba64562c7e758be5c32f6398178279e20b8ac39"
},
"filename": "bittensor_burn_watch-1.3.4-cp313-cp313-win32.whl"
},
{
"hashes": {
"md5": "257f5462dbf29123fc0eee9f401e3c7b",
"sha256": "0f23bc4f12a9eb8cd98ab6325cc50293a2580f26c2b5ca0dbc6462f8063d91c6",
"blake2b_256": "44087df9fa6548a69c9e08f2dd5591e22c22240087628ee58436efa5c8c619b0"
},
"filename": "bittensor_burn_watch-1.3.4-cp313-cp313-win_amd64.whl"
},
{
"hashes": {
"md5": "2717ab171c0c24994a0ccb578c800084",
"sha256": "2ef1462078c66a3a47cbb3731bdf67f4cbd6be4feb5631d254e4d3bf0235fe89",
"blake2b_256": "12770194564f64aa4b9ba7aa437025ade77fbdc4aaa3fcb18657252528867ebb"
},
"filename": "bittensor_burn_watch-1.3.4-cp39-cp39-macosx_11_0_arm64.whl"
},
{
"hashes": {
"md5": "1fd0d405115b119d5b5c342ea2751b2e",
"sha256": "7532277dd1f6e337ecedf25d2e04a4e1927a71e37f453b24563b5e74df4a8b10",
"blake2b_256": "903ff56e0f06ecd0392885cfb192ecdadae19333cdd3ea1b8db4e3a2d52c0836"
},
"filename": "bittensor_burn_watch-1.3.4-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
},
{
"hashes": {
"md5": "aaf47c824cfefb20a72d3a6b5b72afac",
"sha256": "b553918b9e21dcf1f5416cbde5e08a9ab54084473b5ae118fe64a70adc1d6971",
"blake2b_256": "4da75740b1e36184ae92b06ca4b27da1e7588389aba5a83c3f120459617077d3"
},
"filename": "bittensor_burn_watch-1.3.4-cp39-cp39-manylinux_2_5_i686.manylinux1_i686.manylinux_2_17_i686.manylinux2014_i686.whl"
},
{
"hashes": {
"md5": "935171f6a9d21124e678281bd7ac04f4",
"sha256": "1836bdeea4da8cd51ccd3c1e3d626e0013613f34e97f04f241c2844c374ebb29",
"blake2b_256": "31e8dd2aa97f7d9540ad9b82fb527ed1bff182685f29b51eb2e1cc1813b37017"
},
"filename": "bittensor_burn_watch-1.3.4-cp39-cp39-win32.whl"
},
{
"hashes": {
"md5": "015f2224b9ce1db83a907bf98ad54d5f",
"sha256": "03caf3fa9858481192d0bcc79f2d724acf708f7113fb52e1ce8c9c9e6c14373a",
"blake2b_256": "97f183aad77e2bccc2e1919b52eff167a0ea4d4279b620bc16997a6e7c1a585b"
},
"filename": "bittensor_burn_watch-1.3.4-cp39-cp39-win_amd64.whl"
}
]
}