Malicious code in agent-vx (PyPI)
Description
The PyPI package 'agent-vx' version 0.1.0 contains malicious code that installs a persistent job on the victim's machine. This allows attackers to exfiltrate files and execute remote commands, effectively functioning as a remote access trojan (RAT). The package is designed for persistence and unauthorized remote control.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The 'agent-vx' package on PyPI (version 0.1.0) includes malicious functionality that installs a persistent autorun job on the infected system. This job enables attackers to exfiltrate files and execute a limited set of remote commands on the victim's machine. The package acts as a remote access trojan (RAT) with persistence mechanisms to maintain long-term access.
Potential Impact
Successful installation of this package results in unauthorized remote code execution and data exfiltration capabilities for the attacker. The victim's system is compromised with persistent backdoor access, allowing ongoing control and information theft.
Defensive Guidance
No official patch or remediation is available. Users should avoid installing the 'agent-vx' package version 0.1.0 from PyPI. Remove the package if already installed and investigate systems for persistence mechanisms and unauthorized remote access.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- MAL-2026-17755
- Osv Schema Version
- 1.7.4
- Ecosystems
- ["PyPI"]
Threat ID: 6acaad892cdf04f65651433e
Added to database: 10/10/2026, 21:26:33 UTC
Last enriched: 10/10/2026, 21:30:54 UTC
Last updated: 10/10/2026, 21:30:54 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.