Malicious Code Exposure in vercel-runtime-python Package
Summary
MAL-2026-17168: Malicious code in vercel-runtime-python (PyPI). Affects vercel-runtime-python versions 0.1.0 – 99.99.99. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The vercel-runtime-python package is designed to serve as a helper for Vercel's Python runtime. However, it lacks any actual runtime functionality and primarily consists of a single public function, send_info(). This function collects sensitive host information, including hostname, IP address, operating system, and machine architecture, and sends it to a hardcoded URL. This behavior raises significant security concerns as it mimics legitimate functionality while actually facilitating unauthorized data exfiltration.
Vulnerability Detail
The vulnerability originates from the package's design, which includes a function that exfiltrates sensitive host information to an attacker-controlled endpoint. The code is embedded within the package, which disguises itself as a legitimate Vercel component. This malicious behavior can lead to unauthorized access to sensitive data, potentially allowing attackers to perform reconnaissance on affected systems. The hardcoded URL is not configurable, meaning users cannot redirect or disable this data transmission, further compounding the risk.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall vercel-runtime-pythonIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary measure, you can prevent the package from executing its malicious code by not importing or using it in your application. Additionally, consider using a virtual environment to isolate your dependencies and avoid unintentional execution of malicious packages.
Conclusion
The vercel-runtime-python package poses a serious security threat due to its embedded malicious code that exfiltrates sensitive host information. Users are advised to uninstall the package and monitor their systems for any unusual activity. Utilizing tools like Vulert can help in identifying and mitigating such vulnerabilities in the future.
See every vulnerability recorded for vercel-runtime-python →
FAQ
It is a package that claims to assist with Vercel's Python runtime but contains malicious code that exfiltrates sensitive host information.
The code collects host information and sends it to a hardcoded URL without user consent, posing a significant security risk.
Uninstall the vercel-runtime-python package immediately and monitor your system for any suspicious activity.
Yes, you can use Vulert's playground at Vulert Scanner to check for vulnerabilities in your application without needing to sign up.
Regularly audit your dependencies, keep them updated, and utilize tools like Vulert to monitor for open-source vulnerabilities.
