Malicious code in flyteplugins-nsight (PyPI)

The flyteplugins-nsight package on PyPI, specifically version 2.6.10, includes malicious code that triggers during installation by overriding the setup.py install command. This code collects and exfiltrates basic system information like IP address and username. The package has no legitimate functionality beyond this data exfiltration. It is categorized as a probable pentest-related package with low harm potential.

The impact is limited to the unauthorized exfiltration of basic host information such as IP address and username. There is no indication of further malicious activity or system compromise. No known exploits in the wild have been reported.

No official patch or remediation is currently documented. Users should avoid installing or importing version 2.6.10 of flyteplugins-nsight. Since this is a malicious package, removal of the package and investigation of any data exfiltration is recommended. Monitor for any updates or advisories from the package maintainers or PyPI.