Malicious Code Detected in anistream Package - Potential Infostealer Threat
Summary
MAL-2026-1499: Malicious code in anistream (PyPI). Affects anistream versions 0.0.1 – 0.0.4. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The anistream package, available on PyPI, is designed for streaming and data handling in Python applications. However, it has been compromised to include malicious code that downloads and executes malware, specifically targeting sensitive information. This vulnerability poses a significant risk to users who rely on this package for their projects.
Vulnerability Detail
The vulnerability originates from a malicious actor who has embedded code within the anistream package that downloads and executes a remote executable. This executable is likely an infostealer, which can capture sensitive information from the user's system. The malicious code is not directly invoked in the package, indicating it may be a dependency or part of a multi-stage infection process. The presence of such malware can lead to severe data breaches and compromise user security.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall anistreamIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary measure, users can avoid using the anistream package until a patched version is released. Additionally, users should monitor their systems for any unusual activity that may indicate malware presence.
Conclusion
The anistream package has been compromised with malicious code that poses a significant threat to users. It is crucial to uninstall affected versions and monitor systems for any signs of malware. Utilizing tools like Vulert can help in identifying and managing vulnerabilities in open-source packages.
See every vulnerability recorded for anistream →
FAQ
anistream is a Python package designed for streaming and data handling, but it has been compromised to include malicious code.
If you have installed any version of the anistream package, your system may be at risk. Monitor for unusual behavior or use tools like Vulert to check for vulnerabilities.
Uninstall the affected versions of anistream and replace them with a secure version as soon as possible.
Yes, you can use Vulert, which monitors and alerts for open-source vulnerabilities in your software without requiring access to the code.
You can use the Vulert playground at Vulert Scanner to check for vulnerabilities in your application without needing to sign up.
