Malicious Code Vulnerability in mangrove-sdk: Backdoor Installation Risk
Summary
MAL-2026-2006: Malicious code in mangrove-sdk (PyPI). Affects mangrove-sdk versions 0.2.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The mangrove-sdk is a Python package available on PyPI, designed to facilitate the development and deployment of AI agents. It provides tools for managing large language models (LLMs) and enhancing their functionality. However, the package has been identified to contain malicious code that compromises the security of systems using it.
Vulnerability Detail
The vulnerability originates from a malicious modification in the installation process of the mangrove-sdk package. Specifically, the package overrides the install command in setup.py to execute harmful code during installation. This code attempts to alter LLM configuration files, creating a backdoor that allows unauthorized control over the AI agent. The ramifications of this vulnerability include potential data breaches, unauthorized access to sensitive information, and the risk of further exploitation of the affected systems.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall mangrove-sdkIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can avoid installing the mangrove-sdk package until a secure version is released. Additionally, consider using a virtual environment to isolate your projects and limit exposure to potentially harmful packages.
Conclusion
The mangrove-sdk package has been identified to contain a serious vulnerability that allows for malicious code execution during installation. Users are advised to take immediate action by updating or uninstalling the package and monitoring their systems for any unauthorized changes.
See every vulnerability recorded for mangrove-sdk →
FAQ
The vulnerability involves malicious code that modifies LLM configuration files during installation, creating a backdoor for unauthorized control.
You can use Vulert's playground at Vulert Scanner to monitor and check for vulnerabilities in your application without needing to sign up.
If you have installed the package, it is recommended to uninstall it immediately and check for any unauthorized changes in your system.
Currently, there is no specific patch version mentioned. Users should monitor the package repository for updates.
The consequences include unauthorized access to AI agents, data breaches, and the risk of further exploitation of the compromised systems.
