🛡️ MAL-2026-10869 — paperclip-ai

Malicious code in paperclip-ai (PyPI)

Source: amazon-inspector

No install-time or import-time network I/O, credential access, dropper, silent-relay, or backdoor behavior was identified in this package version. No lifecycle hooks or suspicious build-backend activity were observed.

Source: kam193

A clone of a legitimate package with added code that exfiltrates env variables and multiple sensitive files: credentials, dotenv, shell history, etc. Exfiltrated credentials were quickly validated by the attacker.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-07-browser-use-headless

Reasons (based on the campaign):

• files-exfiltration
• exfiltration-env-variables
• exfiltration-credentials
• clones-real-package