Three Typosquatted "AI Labs SDK" PyPI Packages Exfiltrate Developer Reconnaissance Data
Three Typosquatted "AI Labs SDK" PyPI Packages Exfiltrate Developer Reconnaissance Data is a high-severity supply chain compromise issue in "AI Labs SDK" PyPI packages, an AI agent. Affected: "AI Labs SDK" PyPI packages (3 names, removed within 24h of May 19).
Is "AI Labs SDK" PyPI packages running on your developers' machines? Anomity finds every device with this AI agent installed, shows the version, and can block it by policy. Detect this across your developers' devices with Anomity →
Key facts
- ID
three-typosquatted-ai-labs-sdk-pypi-packages-exfiltrate-developer- Severity
- high
- Attack type
- Supply chain compromise
- Component
- "AI Labs SDK" PyPI packages · AI agent
- Known exploited
- No known exploitation
- Published
- Last verified
What is this vulnerability?
Three malicious packages typosquatting AI Labs were published to PyPI on May 19 and available for less than 24 hours, accumulating ~1,600 installs. The packages contained no actual SDK functionality, only reconnaissance code that exfiltrated hostname, username, installed Python packages, presence of cloud-credential files, and the listing of ~/.config and project root contents to an attacker-controlled server. The recon profile suggests a follow-on targeted attack on the harvested machines.
Affected versions
| Affected | Fixed in |
|---|---|
"AI Labs SDK" PyPI packages (3 names, removed within 24h of May 19) | No fixed version listed |
Am I affected by this vulnerability?
You are affected if you run "AI Labs SDK" PyPI packages (3 names, removed within 24h of May 19).
How do I fix it?
Audit pip install history on developer machines for AI Labs / ai-labs-sdk style names installed May 19. Block typosquatting via PyPI mirror with allowlisted package names. Treat any machine that installed one of these packages as compromised and rotate local cloud credentials.
How do I find every machine running "AI Labs SDK" PyPI packages?
Anomity inventories the AI agents, MCP servers, IDE extensions and skills on each developer device, so you can see which machines run "AI Labs SDK" PyPI packages and which version, then enforce a policy on it.