Malicious Code Vulnerability in web3dummycti Package
Summary
MAL-2025-191928: Malicious code in web3dummycti (PyPI). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The web3dummycti package is a Python library available on PyPI, designed to facilitate interactions with web3 technologies. It aims to provide developers with tools to build decentralized applications. However, this package has been identified as containing malicious code that poses significant security risks to users.
Vulnerability Detail
The vulnerability in the web3dummycti package originates from a malicious code snippet that, if executed, attempts to download and execute a remote script identified as a Metasploit Framework (msf) payload. Although the code responsible for initiating this malicious action was commented out in the analyzed version, the potential for exploitation remains. This vulnerability allows attackers to create a reverse shell on the victim's machine, enabling them to execute arbitrary commands, which could lead to severe data breaches and system compromises.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall web3dummyctiIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users should avoid using the web3dummycti package until a patched version is released. Additionally, consider implementing network security measures to block any unauthorized outbound connections that may be initiated by the malicious code.
Conclusion
The web3dummycti package contains a serious vulnerability that could allow attackers to execute malicious code on user systems. It is crucial for users to stay informed about updates and to take necessary precautions to protect their systems until a fix is available.
See every vulnerability recorded for web3dummycti →
FAQ
web3dummycti is a Python library designed for developers to interact with web3 technologies and build decentralized applications.
The vulnerability allows attackers to execute arbitrary commands on your machine through a reverse shell, potentially leading to data theft or system compromise.
As of now, there is no patched version available. Users are advised to monitor the package repository for updates.
If you have installed the package, it is recommended to uninstall it and refrain from using it until a secure version is released.
You can use Vulert, which monitors and alerts in real-time for open-source vulnerabilities in your software. You can check if your application is affected by this vulnerability using the Vulert playground at Vulert Scanner without any signup.
