Poisoned Pipeline / Incidents / AS135

AS135 · 2025-10

PyPI typosquats targeting Bittensor developers

PyPIAI coding agents

SafeDep: multiple malicious Python packages typosquatting Bittensor
crypto-developer libraries on PyPI.

Mapped techniques

• T0129 Typosquatting
• T0109 Publish malicious artifact

supply-chain campaign

Sources

• https://safedep.io/malicious-python-packages-target-crypto-developers
• https://www.stepsecurity.io/blog/bittensor-wallet-4-0-2-compromised-on-pypi---backdoor-exfiltrates-private-keys