# MAL-2026-5311: Malicious code in bittensor-burn-monitor (PyPI)


- **Type:** Malicious package
- **Package:** `bittensor-burn-monitor` (PyPI)
- **Published:** 8 Jun 2026

## What is MAL-2026-5311?

MAL-2026-5311 is a malicious package in bittensor-burn-monitor, published on 8 Jun 2026. 

### Official description

bittensor-burn-monitor advertises itself as a Bittensor subnet burn-rate monitor but ships a covert clipboard logger that exfiltrates installers' clipboard contents to a hardcoded Telegram destination. The package's logic is shipped only as compiled Cython binaries (bittensor_burn_watch/core.cpython-310-*.so, burn_watch.cpython-310-*.so) with a thin __init__.py that re-exports `main`; no Python source is provided. The compiled module's own internal documentation describes it as a 'clipboard logger', exposes routines to 'Read clipboard via Win32 API', 'Pick the first working Linux clipboard backend', and run an exclusive daemon that polls the clipboard and sends each capture as a Telegram message. A bundled defaults.env hardcodes a single attacker-controlled bot token and chat ID (TELEGRAM_BOT_TOKEN=8666228137:AAF_NLMrow4cDf3uEJCl3JY7DeBHtovd1TU, TELEGRAM_CHAT_ID=8766781014) so every installer reports to the same destination. The package additionally installs cross-platform persistence so the clipboard daemon survives reboots and respawns if killed — Windows Task Scheduler entries configured to run regardless of battery/time limits with a 15-minute watchdog, a Linux systemd user service + timer, and a macOS LaunchAgent with KeepAlive — and on Linux it silently invokes apt/dnf/pacman to install wl-clipboard/xclip without user prompt to enable clipboard access. Targets Bittensor subnet operators, whose clipboards routinely contain wallet mnemonics, validator hotkeys, and API tokens. Clipboard capture, the Telegram destination, and the autostart persistence are all undisclosed in the README.

The package contains code to steal clipboard content to a predefined remote location. If run in the right way, the code will periodically check the clipboard and if the content matches the pattern, exfiltrates it. Early versions contain this behavior mentioned in the README. The targeted data are likely cryptocurrency secret phrases.

---

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-06-clip-logger

Reasons (based on the campaign):

 - clipboard-stealing

 - crypto-related

## What should I do about MAL-2026-5311?

Remove the package from your dependencies and lockfiles, then rotate any secrets on machines where it was installed.

## Fix prompt for AI coding agents

```text
MAL-2026-5311 is a malicious package: bittensor-burn-monitor (PyPI). Every version was published to cause harm.

Task:
1. Search this repository's dependency manifests and lockfiles for the package, including transitive dependencies.
2. If it is present, remove it, regenerate the lockfile with the project's package manager, and replace whatever it was used for.
3. List any CI runners, developer machines or containers that installed it, so their secrets can be rotated.
4. If the package is not used anywhere, say so and change nothing.

Reference: https://insights.sbomify.com/MAL-2026-5311/ (Markdown: https://insights.sbomify.com/MAL-2026-5311/index.md)
```

## Sources

- OSV: https://osv.dev/vulnerability/MAL-2026-5311

---
From sbomify Insights: https://insights.sbomify.com/MAL-2026-5311/
Summaries are generated and may contain mistakes; the official description above is the record.