Malicious Code Execution Vulnerability in test-poc-package-for-session
Summary
MAL-2026-502: Malicious code in test-poc-package-for-session (PyPI). Affects test-poc-package-for-session versions 0.0.1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The package 'test-poc-package-for-session' is a Python package available on PyPI, primarily designed for testing purposes in penetration testing and security research. It is intended to facilitate the exploration of pre-prepared kits and testing scenarios. However, this package has been identified to contain malicious code that executes during installation, posing a significant risk to users who install it.
Vulnerability Detail
The vulnerability arises from the package overriding the install command in its setup.py file, which allows it to execute arbitrary malicious code during the installation process. This behavior can lead to unauthorized actions on the user's system, potentially compromising security and data integrity. The origin of this vulnerability is linked to the package's intent to mimic typical pentesting tools while harboring harmful functionalities.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall test-poc-package-for-sessionIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, consider using alternative packages that provide similar functionality without the associated risks. Always verify the integrity and source of packages before installation.
Conclusion
The 'test-poc-package-for-session' package contains a serious vulnerability that allows for the execution of malicious code during installation. Users are advised to uninstall the package immediately and consider safer alternatives. Regular monitoring of dependencies using tools like Vulert can help prevent future vulnerabilities.
See every vulnerability recorded for test-poc-package-for-session →
FAQ
The malicious code executes during the installation process, potentially allowing unauthorized access or actions on the user's system.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If you have installed the package, immediately uninstall it using the command: 'pip uninstall test-poc-package-for-session'.
Yes, consider using other well-reviewed and trusted packages for penetration testing that do not exhibit malicious behavior.
Always verify the source of packages, read reviews, and use tools like Vulert to monitor for vulnerabilities in your dependencies.
