Malicious Code Vulnerability in quillonatts Package - Remote Script Execution Risk
Summary
MAL-2026-18145: Malicious code in quillonatts (PyPI). Affects quillonatts versions 0.1.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The quillonatts package, available on PyPI, is part of a series of loader packages that execute code from a specified URL. Its primary function is to facilitate the loading of external scripts, which can pose significant security risks if misused. This package has been identified as part of a coordinated campaign aimed at distributing malicious code, making it crucial for users to be aware of its vulnerabilities.
Vulnerability Detail
The vulnerability in the quillonatts package stems from its ability to download and execute remote scripts without proper validation. This behavior allows attackers to execute arbitrary code on the user's machine, potentially leading to data theft, system compromise, or further exploitation. The malicious campaign associated with this package has been identified as targeting users through deceptive methods to load harmful scripts.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall quillonattsIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary measure, avoid using the quillonatts package until a secure version is released. If you must use it, consider implementing network security measures to block unauthorized script execution and monitor outgoing requests for suspicious activity.
Conclusion
The quillonatts package presents a significant security risk due to its ability to execute remote scripts. Users are urged to update or remove the package to mitigate potential threats. Staying informed about vulnerabilities and utilizing tools like Vulert can help maintain the security of your applications.
See every vulnerability recorded for quillonatts →
FAQ
quillonatts is a Python package that allows the execution of code from a specified URL, which can be exploited to run malicious scripts.
This vulnerability can lead to unauthorized code execution on your system, potentially resulting in data breaches or system compromise.
If you have installed quillonatts, it is recommended to uninstall it immediately and monitor your system for any suspicious activity.
Yes, you can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without requiring any signup.
Regularly update your packages, use trusted sources, and implement security measures such as firewalls and intrusion detection systems to protect your application.
