THREATPKG
SYNC STALE

Supply-chain threat intelligence

Incident detail

criticalpypi·credential theft·osv

Malicious code in quant-backtest-helpers (PyPI)

quant-backtest-helpers

Risk score

92

AI summary

Indexed incident for quant-backtest-helpers (pypi).

Description

-= Per source details. Do not edit below this line.=-

Source: kam193 (ed851ff141e13db6dd7c16a3d4f1b3b92eb9fa6a917f5243ba22ccb933554e43)

During import, package exfiltrates environment variables and cloud tokens to a hardcoded location.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-06-quant-backtest-helpers

Reasons (based on the campaign):

  • exfiltration-env-variables

  • exfiltration-cloud-tokens

Technical details

Affected versions

<function fixed() { [native code] }

Indicators

  • affected_version<function fixed() { [native code] }75%

Timeline

  1. Advisory published
  2. Indexed by ThreatPkg

Related incidents