Exfiltration Vulnerability in faaladorcli Package - Malicious Code Detected
Summary
MAL-2026-1351: Malicious code in faaladorcli (PyPI). Affects faaladorcli versions 99.0.1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
faaladorcli is a Python package available on PyPI, designed for command-line interface operations. It is intended for users who engage in penetration testing and bug bounty programs. However, this package has been identified to contain malicious code that can exfiltrate sensitive user information, such as IP addresses and usernames, during installation or import.
Vulnerability Detail
The vulnerability originates from a malicious code embedded in the faaladorcli package, specifically in version 99.0.1. This code attempts a dependency confusion attack by exfiltrating basic system information to an external source. The risk is categorized as limited, but it poses a potential threat to user privacy and security, especially for those involved in bug bounty programs.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall faaladorcliIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can avoid using the faaladorcli package until a secure version is released. Additionally, consider using alternative packages that do not exhibit malicious behavior.
Conclusion
The faaladorcli package has been identified with a vulnerability that allows for the exfiltration of sensitive user information. Users are advised to uninstall the affected version and monitor for updates. Utilizing tools like Vulert can help in identifying such vulnerabilities in real-time.
See every vulnerability recorded for faaladorcli →
FAQ
faaladorcli is a Python package designed for command-line interface operations, primarily used in penetration testing and bug bounty programs.
The vulnerability involves malicious code that exfiltrates user information during the installation or import of the package.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If you have installed faaladorcli, it is advisable to uninstall it immediately and check for any updates or patches.
Yes, using faaladorcli can expose your system to risks such as unauthorized data exfiltration, which can compromise your privacy and security.
