Malicious Code Vulnerability in tablescene Package
Summary
MAL-2026-738: Malicious code in tablescene (PyPI). Affects tablescene versions 1.0.3. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The tablescene package, available on PyPI, is designed for creating and managing table scenes in Python applications. It offers functionalities that allow developers to easily manipulate and display tabular data. However, this package has been compromised, containing hidden malicious code that poses significant security risks to users.
Vulnerability Detail
The vulnerability originates from a malicious campaign identified as '2025-11-spellcheckers'. The compromised version of the tablescene package (1.0.3) includes obfuscated code that executes upon import. This code downloads additional malicious scripts and establishes a background process that connects to remote hosts, waiting for further commands to execute on the victim's machine. The implications of this vulnerability are severe, as it can lead to unauthorized access, data theft, and potential system compromise.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall tablesceneIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, avoid using the tablescene package until a secure version is released. Consider using alternative libraries for managing table scenes that are known to be secure.
Conclusion
The tablescene package has been compromised with malicious code that poses serious security threats. Users are advised to uninstall the affected version and seek secure alternatives. Continuous monitoring for vulnerabilities is essential to maintain application security.
See every vulnerability recorded for tablescene →
FAQ
The tablescene package is a Python library designed for creating and managing table scenes, allowing developers to manipulate and display tabular data efficiently.
The malicious code executes when the package is imported, downloading additional scripts and establishing a connection to remote servers for further commands.
The risks include unauthorized access to the victim's machine, potential data theft, and the execution of arbitrary commands by attackers.
You can use Vulert's playground at Vulert Scanner to monitor and alert for open-source vulnerabilities in your software without requiring any signup.
If you are using version 1.0.3 of the tablescene package, uninstall it immediately and look for secure alternatives or patched versions.
