Malicious Code Execution Vulnerability in deebug Package
Summary
MAL-2026-18117: Malicious code in deebug (PyPI). Affects deebug versions 1.0.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The deebug package, available on the Python Package Index (PyPI), is designed for debugging Python applications. It is intended to assist developers in identifying and resolving issues within their code. However, this package has been compromised, leading to a significant security vulnerability that allows the execution of malicious code during installation.
Vulnerability Detail
The vulnerability originates from a malicious version of the deebug package, specifically version 1.0.0, which was uploaded by a user identified as kam193. Upon installation, this package downloads and executes malware from a remote server, posing a severe risk to users' systems. The malicious behavior includes downloading an executable from the domain c2-worker.crawlnet-claim.workers.dev, which can lead to unauthorized access and data theft.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall deebugIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can consider using alternative debugging packages such as 'pdb' or 'pdb++' that do not have known vulnerabilities. Additionally, ensure that your environment is secure and monitor for any unusual activity after the installation of any package.
Conclusion
The deebug package has been compromised, leading to a serious vulnerability that allows for the execution of malicious code during installation. Users are advised to uninstall the package immediately and consider alternative debugging tools to ensure their systems remain secure.
See every vulnerability recorded for deebug →
FAQ
deebug is a Python package designed to assist developers in debugging their applications by providing tools and functionalities to identify and resolve issues.
The vulnerability allows the installation of malicious code that can execute harmful actions on your system, potentially leading to data theft or unauthorized access.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
Immediately uninstall the deebug package using 'pip uninstall deebug' and consider using alternative debugging tools.
Currently, there is no patched version available for the deebug package. It is recommended to avoid using it altogether.
