Malicious Code Vulnerability in wayspiritmcp-ppa: A Threat to LLM Safeguards
Summary
MAL-2025-191925: Malicious code in wayspiritmcp-ppa (PyPI). Affects wayspiritmcp-ppa versions 0.1.0 – 0.1.1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The 'wayspiritmcp-ppa' package, available on PyPI, is designed to provide a Multi-Channel Protocol (MCP) server. It is intended for use in various applications, including those involving large language models (LLMs). However, this package has been identified as containing malicious code that attempts to undermine the safeguards of LLM agents, raising significant security concerns for users and developers alike.
Vulnerability Detail
The vulnerability originates from the package's code, which appears to be a research tool but is actually designed to manipulate LLM agents into bypassing their built-in safeguards. This malicious intent poses risks such as unauthorized access to sensitive data, exploitation of LLM capabilities for harmful purposes, and potential damage to the integrity of applications relying on these models. The package's attempts to disguise its true purpose make it particularly insidious.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall wayspiritmcp-ppaIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary measure, users can avoid using the 'wayspiritmcp-ppa' package until it has been confirmed safe. Additionally, consider implementing security measures such as input validation and monitoring for unusual behavior in applications that may interact with LLMs.
Conclusion
The wayspiritmcp-ppa package has been identified as containing malicious code that threatens the integrity of applications using LLMs. Users are strongly advised to update the package to the latest version and to utilize tools like Vulert for ongoing monitoring of vulnerabilities in their software.
See every vulnerability recorded for wayspiritmcp-ppa →
FAQ
The wayspiritmcp-ppa package is designed to provide a Multi-Channel Protocol server, primarily for applications involving large language models.
The package contains code that attempts to manipulate LLM agents into bypassing their safeguards, posing significant security risks.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
If you are using the wayspiritmcp-ppa package, you should update it to the latest version immediately and consider removing it until it is confirmed safe.
Vulert monitors and alerts in real-time for open-source vulnerabilities using just the Pipfile.lock, providing a streamlined way to stay informed about potential threats.
