Malicious code in flyteplugins-agento11y (PyPI)

The flyteplugins-agento11y package on PyPI, specifically version 2.6.10, includes code that executes during installation by overriding the setup.py install command. This code collects and exfiltrates basic system information including IP address and username. The package does not provide any legitimate functionality and is considered malicious. There is no indication of known exploits in the wild or a vendor patch. The risk is limited to the exfiltration of basic host information.

Installation or import of the affected package results in unauthorized exfiltration of basic system information such as IP address and username. This could lead to privacy breaches or reconnaissance information disclosure. No further impact or exploitation details are provided.

No official patch or remediation is indicated. Users should avoid installing or importing the flyteplugins-agento11y package version 2.6.10. Review and remove the package if already installed. Since this is a malicious package on PyPI, rely on trusted sources and verify package integrity before installation.