Malicious Python packages target popular Bitcoin library

ReversingLabs discovered two malicious PyPI packages (bitcoinlibdbfix and bitcoinlib-dev) masquerading as fixes for the popular bitcoinlib library; both attempted to replace the legitimate clw CLI with code designed to exfiltrate sensitive database files. The packages were flagged by ReversingLabs’ ML-driven Spectra platform and removed from PyPI, illustrating the growing use of ML to detect emerging software supply-chain threats targeting cryptocurrency tooling.