Trojanized PyPI packages hijack Telegram bot servers

Python developers building Telegram bots have been targeted by a supply-chain attack distributing trojanized versions of the Pyrogram library. The malicious packages, active since November 2025, enable attackers to gain control of bot servers and access arbitrary files on compromised systems.

What happened

The attack involves forks of Pyrogram, a popular Python framework for interacting with Telegram’s API. These trojanized packages are uploaded to the Python Package Index (PyPI) and mimic legitimate versions, tricking developers into installing them. Once deployed, the malware allows attackers to execute file-reading operations on infected servers, though the full scope of data exfiltration remains unclear.

The campaign was identified by security researchers monitoring PyPI for suspicious activity. No specific victim count or affected organizations have been disclosed, and the attackers’ motives—whether financial, espionage, or opportunistic—are still unknown. The source did not specify how the malicious packages were initially distributed or whether social engineering played a role in their adoption.

What we don’t know yet

Details about the attack’s origin, the number of compromised systems, and the types of files targeted are not publicly available. It is also unclear whether the attackers have moved beyond file access to execute additional payloads or maintain persistence on infected servers. The timeline of the campaign’s discovery and mitigation efforts by PyPI maintainers has not been shared.