Malicious Code Injection in collecters Package - PyPI Vulnerability
Summary
MAL-2026-1371: Malicious code in collecters (PyPI). Affects collecters versions 1.0.1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The collecters package is a Python library available on the Python Package Index (PyPI) that is designed for data collection and processing tasks. It is commonly used by developers to simplify the process of gathering and managing data from various sources. However, this package has been found to contain malicious code that poses significant security risks to users. The vulnerability allows attackers to execute remote commands on the victim's machine, potentially leading to data theft and system compromise.
Vulnerability Detail
The vulnerability originates from a malicious campaign identified as '2025-11-spellcheckers'. The collecters package contains hidden code that executes upon import, which downloads additional malicious scripts. This code establishes a background process that connects to remote hosts, awaiting further instructions. The malicious behavior includes obfuscation techniques to hide its true intent, and it can execute remote commands on the victim's machine, making it a severe security threat.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall collectersIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can avoid using the collecters package until a secure version is released. Additionally, consider using alternative libraries that provide similar functionality without the associated risks.
Conclusion
The collecters package has been identified as containing malicious code that poses a significant security risk to users. It is crucial to uninstall the affected version and monitor for updates. Utilizing tools like Vulert can help keep your dependencies secure and informed about potential vulnerabilities.
See every vulnerability recorded for collecters →
FAQ
The collecters package is a Python library used for data collection and processing tasks, commonly utilized by developers.
The vulnerability allows attackers to execute remote commands on your machine, which can lead to data theft and system compromise.
Immediately uninstall the collecters package and check for any updates or patches that may address the vulnerability.
Yes, consider using other data collection libraries that do not have known vulnerabilities.
You can use tools like Vulert, which monitors and alerts for open-source vulnerabilities in your software without requiring code access or installation.
