TI Mindmap HUB
Threat Intelligence Report

Backdoored PyPI Package fragment-api-py 14.4.2 Drains TON Wallets on Startup

📅 November 10, 2026 📰 safedep.io 🔍 0 CVE(s) referenced

PyPI package fragment-api-py 14.4.2 was backdoored to automatically drain users’ TON and USDT wallets on client startup, stealing nearly 45 TON from at least two victims.

vendor

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap
🎯 IOC Extraction
⚔️ MITRE ATT&CK TTPs
📦 STIX 2.1 Bundle