Critical Reverse Shell Vulnerability in anontest123 Package
Summary
MAL-2026-1339: Malicious code in anontest123 (PyPI). Affects anontest123 versions 1.0.1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The anontest123 package is a Python library available on the Python Package Index (PyPI) that is intended for various utility functions. However, it has been found to contain malicious code that compromises user security. This vulnerability allows attackers to execute arbitrary commands on the victim's machine, posing a significant risk to users who install the package.
Vulnerability Detail
The vulnerability originates from malicious code embedded in the anontest123 package, specifically version 1.0.1. Upon installation, this code initiates a reverse shell connection to an external IP address (52.148.155.85), enabling the attacker to gain unauthorized access and control over the victim's system. The implications of this vulnerability are severe, as it can lead to data theft, system compromise, and further exploitation of the affected machine.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall anontest123If it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users should avoid installing the anontest123 package altogether. If it is already installed, it should be uninstalled using the command: 'pip uninstall anontest123'. Additionally, users can monitor their systems for any unauthorized activity that may have occurred due to the installation of this package.
Conclusion
The anontest123 package contains a critical vulnerability that allows for the execution of arbitrary commands through a reverse shell. Users are strongly advised to uninstall the package and monitor their systems for any signs of compromise. Staying informed about updates and using tools like Vulert can help in managing open-source vulnerabilities effectively.
See every vulnerability recorded for anontest123 →
FAQ
anontest123 is a Python package available on PyPI, intended for utility functions but has been compromised with malicious code.
The vulnerability allows attackers to execute arbitrary commands on the victim's machine, leading to potential data theft and system compromise.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring signup.
Immediately uninstall the package using 'pip uninstall anontest123' and monitor your system for any unauthorized activity.
Currently, there is no patch available. Users should avoid using the package and stay updated on any future releases.
