Malicious PyPI Package Impersonates SymPy, Deploys XMRig Miner on Linux Hosts

Back Thehackernews

Malicious PyPI Package Impersonates SymPy, Deploys XMRig Miner on Linux Hosts

Thehackernews •[email protected] (The Hacker News) • January 22, 2026

Share: View original

Discover how leading MSSPs use AI to automate security management, boost margins, and scale services without extra headcount.

Join cybersecurity leaders Kumar Saurabh and Francis Odum to learn how to build, buy, and automate smarter for a modern, efficient SOC.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Malicious sympy-dev Package Targets SymPy Users with Cryptomining Malware A malicious package named sympy-dev has been identified on the Python Package Index (PyPI), impersonating the popular SymPy library. This package employs typosquatting techniques to deliver cryptomining malware, affecting millions of users who download the legitimate SymPy library, which sees tens of millions of downloads monthly. 4 sources 34

Extracted Entities

Attack Types (1)

Malware (1)

Platforms (1)