Critical Malicious Code Vulnerability in libfwupdplugin1 Package
Summary
MAL-2025-6535: Malicious code in libfwupdplugin1 (PyPI). Affects libfwupdplugin1 versions 1.0.0 – 9.0.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
libfwupdplugin1 is a Python package available on PyPI that is designed to facilitate firmware updates for various devices. It is utilized in applications that require seamless integration with hardware components, ensuring that users can keep their devices up to date with the latest firmware. However, this package has been identified to contain malicious code, posing significant risks to users and their systems.
Vulnerability Detail
The vulnerability identified as MAL-2025-6535 in the libfwupdplugin1 package stems from the inclusion of malicious code that can compromise the integrity of systems utilizing this package. This code can lead to unauthorized access, data breaches, and potential system failures. The malicious nature of this vulnerability was discovered by ReversingLabs, highlighting the importance of scrutinizing third-party packages for security risks.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall libfwupdplugin1If it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users are advised to avoid using the libfwupdplugin1 package until a secure version is confirmed. If the package is essential for your application, consider isolating it in a controlled environment to mitigate potential risks.
Conclusion
The libfwupdplugin1 package has been identified with a critical vulnerability due to the presence of malicious code. Users are strongly urged to update the package or implement workarounds to safeguard their systems. Continuous monitoring and vigilance are essential to maintain security in open-source software.
See every vulnerability recorded for libfwupdplugin1 →
FAQ
The vulnerability involves malicious code that can lead to unauthorized access and potential data breaches.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without requiring signup.
It is recommended to update the package to the latest secure version or remove it from your project until a fix is available.
The vulnerability was discovered by ReversingLabs, a cybersecurity firm specializing in threat detection.
Yes, users should update to the latest version of libfwupdplugin1 to ensure they are protected against this vulnerability.
