Executive Summary
In April 2026, the widely used Python package `elementary-data` (v0.23.3) was compromised in a sophisticated supply chain attack attributed to TeamPCP. The attacker exploited a script injection vulnerability in the project's GitHub Actions workflows by posting a malicious PR comment. This allowed them to forge a release commit as a GitHub Action bot and publish a poisoned version of the package to PyPI without direct repository write access.
The malicious package utilized a `.pth` file to achieve execution immediately upon installation. Once active, it deployed a multi-stage encrypted payload designed to harvest sensitive credentials, including cloud provider keys (AWS, GCP, Azure), data warehouse profiles (Snowflake, BigQuery), SSH keys, Kubernetes secrets, and cryptocurrency wallets. The stolen data was exfiltrated to a C2 server under the domain `skyhanni.cloud`.
This incident highlights the critical risk of insecure CI/CD pipelines and the ongoing threat of 'Trusted Publisher' bypasses. Organizations using `elementary-data` are urged to upgrade to version 0.23.4 immediately, rotate all potentially exposed secrets, and audit GitHub Actions for unquoted context expressions in shell scripts.