Malicious Code Injection in tableapys Package - PyPI Vulnerability
Summary
MAL-2026-686: Malicious code in tableapys (PyPI). Affects tableapys versions 1.0.1 – 1.0.2. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The tableapys package, available on the Python Package Index (PyPI), is designed to facilitate data manipulation and analysis in Python. However, it has been found to contain malicious code that executes hidden commands and downloads additional harmful scripts during its import. This vulnerability poses a significant risk to users who rely on this package for their projects.
Vulnerability Detail
The vulnerability originates from a malicious actor, identified as kam193, who has embedded hidden code within the tableapys package. This code is executed upon importing the library, allowing it to download additional malicious scripts and establish a connection to a remote host. The implications of this vulnerability include unauthorized access to the victim's machine, potential data theft, and the execution of arbitrary commands, which can severely compromise system integrity.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall tableapysIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users are advised to avoid using the tableapys package until a secure version is confirmed. Additionally, consider using alternative libraries for data manipulation that do not have known vulnerabilities.
Conclusion
The tableapys package has been identified as containing malicious code that poses a significant threat to users. Immediate action is required to update or remove the package to protect against potential data breaches and unauthorized access. Utilizing tools like Vulert can help in monitoring and managing vulnerabilities effectively.
See every vulnerability recorded for tableapys →
FAQ
The vulnerability involves malicious code that executes upon importing the package, allowing it to download and execute harmful scripts.
You can use Vulert's playground at Vulert Scanner to check if your application is affected without requiring any signup.
If you have installed tableapys, it is crucial to uninstall it immediately and check for any unauthorized changes to your system.
Yes, consider using libraries such as pandas or NumPy for data manipulation, which are widely used and have no known vulnerabilities.
Vulert monitors and alerts in real-time for open-source vulnerabilities in your software by analyzing the Pipfile.lock, ensuring you stay informed about potential risks.
