Malicious Code Vulnerability in amplify-python-logging Package
Summary
MAL-2026-842: Malicious code in amplify-python-logging (PyPI). Affects amplify-python-logging versions 0.0.0 – 0.1.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The amplify-python-logging package is a Python library available on PyPI, designed for logging purposes in applications. It is intended to help developers capture and manage log data effectively. However, this package has been identified as malicious, as it contains code that exfiltrates sensitive information from the host system, such as IP addresses and usernames, undermining user privacy and security.
Vulnerability Detail
The vulnerability originates from the package's malicious code that executes during installation. It overrides the install command in setup.py, allowing it to run arbitrary code that collects and sends basic information about the host to an external source. This poses a risk as it compromises user data without consent. The affected versions include 0.0.0 and 0.1.0, and the package has no legitimate functionality beyond this malicious behavior.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall amplify-python-loggingIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There are no specific workarounds to mitigate the effects of this vulnerability other than completely avoiding the use of the amplify-python-logging package. If logging functionality is required, consider using well-known and trusted alternatives.
Conclusion
The amplify-python-logging package has been identified as malicious due to its capability to exfiltrate sensitive information from users' systems. It is essential to uninstall this package and refrain from using it to protect your data. Always consider trusted alternatives for logging needs and utilize tools like Vulert for ongoing vulnerability monitoring.
See every vulnerability recorded for amplify-python-logging →
FAQ
It is a Python library intended for logging purposes in applications, but it has been identified as malicious.
The vulnerability allows the package to exfiltrate sensitive information such as IP addresses and usernames from your system.
Uninstall the package immediately using 'pip uninstall amplify-python-logging' and avoid installing it in the future.
Yes, consider using well-known logging libraries such as 'logging' (built-in Python library) or 'loguru' for secure logging functionality.
You can use Vulert, which monitors and alerts in real-time for open-source vulnerabilities in your software. You can check your application against known vulnerabilities without signing up at the Vulert playground.
