Malicious Code Exploit in Printrables Package: A Security Threat
Summary
MAL-2026-951: Malicious code in printrables (PyPI). Affects printrables versions 1.0.1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Printrables is a Python package available on the PyPI repository, designed to facilitate various printing functionalities within Python applications. However, it has been compromised, containing hidden malicious code that executes upon import, posing significant security risks to users.
Vulnerability Detail
The vulnerability originates from a malicious actor identified as 'kam193', who has embedded hidden code within the Printrables package. This code activates during the library's importation, subsequently downloading additional malicious scripts. The compromised package establishes a background process that connects to remote servers, awaiting further commands to execute on the victim's machine. This poses severe risks, including unauthorized data access and potential system compromise.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall printrablesIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users are advised to avoid using the Printrables package until a patch is confirmed. If the package is essential, consider isolating its use in a controlled environment to minimize exposure to potential threats.
Conclusion
The Printrables package has been identified as containing malicious code that poses significant security threats. Users are strongly advised to update to the latest version or implement workarounds to protect their systems. Regular monitoring for vulnerabilities is crucial for maintaining software security.
See every vulnerability recorded for printrables →
FAQ
Printrables is a Python package designed to assist with various printing tasks in Python applications.
The package was compromised by embedding malicious code that executes upon import, allowing for unauthorized remote access.
The risks include unauthorized data access, potential system compromise, and the execution of remote commands on the victim's machine.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
If immediate updates are not possible, consider isolating the use of the Printrables package in a controlled environment to mitigate risks.
