Malicious Code Injection in adminbypasser Package
Summary
MAL-2026-774: Malicious code in adminbypasser (PyPI). Affects adminbypasser versions 1.0.1 – 2.0.1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The adminbypasser package, available on PyPI, is designed to facilitate administrative bypassing in various applications. It is often utilized by developers to streamline access control processes. However, this package has been found to contain malicious code that poses significant security risks, including unauthorized remote code execution.
Vulnerability Detail
The vulnerability in the adminbypasser package originates from a malicious code snippet that silently downloads and executes remote scripts without user consent. This behavior compromises the integrity of the system by allowing attackers to execute arbitrary code, potentially leading to data breaches, unauthorized access, and persistent malware installation. The malicious code was identified in versions 1.0.1 through 2.0.1, and during analysis, the remote domain used for the malicious activity was found to be defunct.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall adminbypasserIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, you can uninstall the adminbypasser package using the command: 'pip uninstall adminbypasser'. This will prevent any malicious code execution until a safe version is confirmed.
Conclusion
The adminbypasser package has been identified as containing malicious code that poses serious security risks. Users are advised to uninstall the affected versions and monitor their systems for any signs of compromise. Utilizing tools like Vulert can help in identifying vulnerabilities in open-source packages.
See every vulnerability recorded for adminbypasser →
FAQ
adminbypasser is a Python package used for bypassing administrative controls in applications, but it has been compromised with malicious code.
You can check if your application is affected by using Vulert, which monitors open-source vulnerabilities in real-time. Visit Vulert Scanner for more information.
If you have installed the affected versions of adminbypasser, it is recommended to uninstall the package immediately and monitor your system for any unusual activity.
As of now, it is advised to avoid using adminbypasser until a patched version is released. Always check the official repository for updates.
Using compromised packages can lead to unauthorized access, data breaches, and the installation of persistent malware, which can severely impact your system's security.
References
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
