Supply chain · pip · High

Critical Malicious Package: 'walmart-genai-trace' in PyPI Exfiltrates Host Info

Threat Engine Auto-Feed · data current as of 2026-07-31

A malicious package, 'walmart-genai-trace' version 99.0.0, was identified in the PyPI ecosystem. Installation or import of this package leads to the exfiltration of basic host information, posing a critical supply-chain risk. Organizations using PyPI should immediately check for its presence.

  • Package: pip / walmart-genai-trace
  • Affected versions: = 99.0.0
  • Severity: critical
  • Reach: unknown
  • Exposure: 65/100 (High)

What happened — Credential / secret theft

The 'walmart-genai-trace' package (version 99.0.0) on PyPI contains malicious code. Upon installation or module import, it exfiltrates basic information about the host system. The package's primary function appears to be this data exfiltration.

How the attack works

This is a software supply-chain attack where a malicious package is published to a public registry. When developers or automated systems install this package, the embedded malicious code executes. In this case, the package overrides the install command in `setup.py` to run its code during installation, collecting and sending out basic system data.

Who's exposed

Profiles most at risk

  • Development teams using PyPI for Python dependencies
  • CI/CD pipelines that automatically pull Python packages
  • Organizations with internal mirrors that sync from PyPI

Conditions that increase exposure

  • Unpinned dependencies that allow fetching the latest version of a package
  • Lack of dependency lockfiles (e.g., `requirements.txt` with exact versions)
  • Automated build systems that install new or updated dependencies without review
  • Direct or transitive dependency on 'walmart-genai-trace' version 99.0.0

Blast-radius scenarios

  • An attacker gains basic reconnaissance data about compromised build environments or developer machines.
  • Initial access to internal systems via exfiltrated host information, potentially leading to further compromise.
  • Compromise of developer workstations or CI/CD agents, which could expose credentials or access to source code.

What to do (defensive)

Detect

  • Scan dependency trees for 'walmart-genai-trace' version 99.0.0 in all Python projects.
  • Monitor network traffic for unusual outbound connections from build systems or developer machines after package installations.
  • Review `setup.py` files and installation logs for unexpected commands or scripts being executed during package installation.

Contain

  • Immediately quarantine any systems found to have installed 'walmart-genai-trace' version 99.0.0.
  • Block 'walmart-genai-trace' version 99.0.0 at the network perimeter and within internal package registries.
  • Revoke and rotate any credentials that may have been present on compromised systems.

Remediate

  • Remove 'walmart-genai-trace' version 99.0.0 from all affected environments and projects.
  • Rebuild affected systems from trusted images or known good states.
  • Implement strict dependency version pinning and use lockfiles to prevent unexpected package updates.
  • Enhance supply-chain security practices, including package integrity checks and source verification.

Frontier verdict — High

Prioritize immediate detection and removal of 'walmart-genai-trace' version 99.0.0 due to its critical severity and data exfiltration capabilities.

Sources

For detection-engineering and awareness only · point-in-time · not security advice · sourced from the GitHub Advisory Database.