The reported PyPI supply-chain attack delivering ZiChatBot malware is a reminder that trusted developer ecosystems are increasingly being abused as malware delivery channels. According to public reporting, three PyPI packages, uuid32-utils, colorinal, and termncolor, were used to covertly deliver malware on both Windows and Linux systems. The malware reportedly used Zulip APIs as command-and-control infrastructure instead of a traditional dedicated C2 server, making detection more challenging.


This incident highlights a larger concern for enterprises: software risk does not always enter through email attachments or suspicious websites. It can arrive through open-source packages, developer tools, dependencies, build systems, and update chains. In other words, even “trusted” software repositories can become an attack path, because apparently attackers also understand dependency management better than many project teams.


At GajShield, we believe organizations should strengthen visibility and control across the network, DNS, web, and application layers. Security teams should monitor unusual outbound connections, restrict access to suspicious or newly observed domains, inspect downloads where applicable, and maintain clear policies for third-party package usage in development environments.


For developer and enterprise environments, this is also a strong case for maintaining approved package repositories, dependency scanning, software bill of materials practices, endpoint monitoring, and controlled internet access for build systems.

Cybersecurity researchers have discovered three packages on the Python Package Index (PyPI) repository that are designed to stealthily deliver a previously unknown malware family called ZiChatBot on Windows and Linux systems. "While these wheel packages do implement the features described on their PyPI web pages, their true purpose is to covertly deliver malicious files," Kaspersky

Source: PyPI Packages Deliver ZiChatBot Malware via Zulip APIs on Windows and Linux via The Hacker News — published 07 May 2026.