Supply chain · pip · High

Critical: Malicious 'friendly-tools' pip package exfiltrates Snowflake credentials

Threat Engine Auto-Feed · data current as of 2026-10-01

The 'friendly-tools' package (version 0.1) on PyPI contains obfuscated code designed to exfiltrate data, specifically targeting Snowflake database credentials. Organizations using this package are at high risk of credential theft and data compromise.

  • Package: pip / friendly-tools
  • Affected versions: = 0.1
  • Severity: critical
  • Reach: unknown
  • Exposure: 65/100 (High)

What happened — Credential / secret theft

A malicious version of the 'friendly-tools' package (0.1) was published to PyPI. This package includes obfuscated code intended to exfiltrate data from the execution environment, with a primary focus on stealing credentials for Snowflake databases.

How the attack works

This is a supply-chain attack where a seemingly legitimate software package is compromised with malicious code. When the package is installed and executed, the embedded code activates to collect sensitive information, such as credentials, from the system and transmit it to an attacker-controlled destination.

Who's exposed

Profiles most at risk

  • Development teams using the pip ecosystem
  • Organizations with CI/CD pipelines that pull Python dependencies
  • Teams whose applications or infrastructure interact with Snowflake databases

Conditions that increase exposure

  • Projects with unpinned dependencies that might resolve to 'friendly-tools' version 0.1
  • Build systems or developer environments that install 'friendly-tools' without strict version constraints
  • Environments where 'friendly-tools' is installed and has access to Snowflake credentials or related configuration

Blast-radius scenarios

  • An attacker could gain unauthorized access to Snowflake databases using exfiltrated credentials.
  • Sensitive data stored in Snowflake databases could be compromised or exfiltrated.
  • The compromised package could serve as a beachhead for further attacks within the affected environment.

What to do (defensive)

Detect

  • Scan dependency trees for 'friendly-tools' version 0.1 in all Python projects.
  • Monitor network traffic for unusual outbound connections from systems where Python packages are installed or run.
  • Review logs for unexpected file access or process execution originating from Python environments.

Contain

  • Immediately quarantine or isolate any systems identified as having installed 'friendly-tools' version 0.1.
  • Revoke and rotate all credentials, especially Snowflake credentials, that were accessible from environments where the malicious package might have been present.
  • Block 'friendly-tools' version 0.1 from being downloaded from package registries or internal mirrors.

Remediate

  • Remove 'friendly-tools' version 0.1 from all affected environments and projects.
  • Update dependency management to use strict version pinning and lockfiles for all third-party packages.
  • Conduct a thorough forensic analysis on any compromised systems to identify the full extent of data exfiltration or system compromise.

Frontier verdict — High

Prioritize immediate detection and removal of 'friendly-tools' version 0.1 due to critical risk of Snowflake credential theft.

Sources

For detection-engineering and awareness only · point-in-time · not security advice · sourced from the GitHub Advisory Database.