Malicious Code Execution Vulnerability in ajenti-plugin-testing-pyld Package
Summary
MAL-2025-192392: Malicious code in ajenti-plugin-testing-pyld (PyPI). Affects ajenti-plugin-testing-pyld versions 1.1.1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ajenti-plugin-testing-pyld package is a Python library available on PyPI, designed for testing and exploring various functionalities within the Ajenti platform. It is often utilized by developers for pentesting and other testing purposes. However, this package has been identified as containing malicious code that executes during installation, posing a significant security risk to users.
Vulnerability Detail
The vulnerability originates from the package overriding the install command in its setup.py file, allowing it to execute malicious code whenever the package is installed. This behavior can lead to unauthorized access, data breaches, or other malicious activities on the user's system. The package has been flagged as part of a campaign targeting users who may unknowingly install it for legitimate testing purposes, thus exposing them to potential harm.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall ajenti-plugin-testing-pyldIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can avoid installing the ajenti-plugin-testing-pyld package altogether and look for alternative packages that provide similar functionality without the associated risks.
Conclusion
The ajenti-plugin-testing-pyld package has been identified as containing malicious code that executes during installation, posing a significant security risk. Users are advised to uninstall the package and seek alternatives to ensure their systems remain secure.
See every vulnerability recorded for ajenti-plugin-testing-pyld →
FAQ
ajenti-plugin-testing-pyld is a Python package designed for testing and exploring functionalities within the Ajenti platform.
The vulnerability allows the package to execute malicious code during installation, potentially compromising the user's system.
You should uninstall the package immediately and check for any updates or alternatives that do not contain malicious code.
Yes, you can use Vulert to monitor and alert in real-time for open-source vulnerabilities in your software without requiring access to the code or installation.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
