Malicious Code Vulnerability in speed-testing-vps Package
Summary
MAL-2025-191875: Malicious code in speed-testing-vps (PyPI). Affects speed-testing-vps versions 0.2. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The speed-testing-vps package, available on PyPI, is designed for speed testing of virtual private servers (VPS). It is intended to provide users with tools to measure and analyze the performance of their VPS. However, this package has been identified as containing malicious code that allows remote control of the user's computer through a Telegram bot, posing significant security risks.
Vulnerability Detail
The vulnerability originates from a malicious implementation within the speed-testing-vps package, specifically in version 0.2. The package downloads and executes a remote malicious script, effectively turning the user's machine into a remote access trojan (RAT). This can lead to unauthorized access to sensitive information and control over the affected system. The malicious code was introduced by the package maintainer, Kamil Mańkowski (kam193), and is part of a broader campaign identified as 2025-10-speedd-testing-bot.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall speed-testing-vpsIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, avoid using the speed-testing-vps package altogether. If you need to perform speed tests, consider using alternative packages that are known to be secure and do not exhibit malicious behavior.
Conclusion
The speed-testing-vps package has been identified as containing malicious code that poses serious security risks. Users are advised to uninstall the package immediately and seek alternative solutions for speed testing. Regular monitoring for vulnerabilities is essential to maintain the security of your applications.
See every vulnerability recorded for speed-testing-vps →
FAQ
The speed-testing-vps package is a tool designed for measuring the performance of virtual private servers.
The malicious code allows unauthorized remote access to your computer, potentially leading to data theft and system control.
Uninstall the speed-testing-vps package immediately using 'pip uninstall speed-testing-vps' and monitor your system for any unusual activity.
Yes, consider using other reputable packages for speed testing that do not have known vulnerabilities.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to check if your application is affected without needing to sign up.
