Skip to main content
MalwarePublished

filipt (PyPI) · Malicious Code

Affects filiptSource GCVE Database

0

Malicious package : remove filipt and rotate any secrets on hosts that installed it.

Data as of 4 Nov 2026, 00:28 UTC

Classification

Malicious package

Published to PyPI · OSV MAL-2026-18580

What to do

Remove filipt from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

ProductAffectedFixed in
PyPIfiliptAffected
  • 0.1.0 – 0.1.5
6 affected builds		Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The filipt package on PyPI contains malicious code that executes during installation by overriding the install command in setup.py. This behavior has been identified as malware, specifically a remote access trojan (RAT), by multiple security vendors. The affected versions are 0.1.0 through 0.1.5. There is no CVSS score available for this threat.

References

Community reviews

Loading reviews…