Sckit Poetry Build Backend BASH_ENV Injection for PyPI Token Theft

Ibrahim Saud@tektrix

•updated Sep 23, 2026•0•0•4

Detects malicious BASH_ENV injection within GitHub Actions CI pipelines originating from the compromised sckit_poetry_build.py build backend. The injection, which targets GITHUB_ENV to introduce a malicious _pypi_bridge.sh script, is used to intercept PyPI publishing tokens during build processes, characteristic of the MemTensor/sckit supply chain attack.