Malicious code in flyteplugins-redis (PyPI)

flyteplugins-redis version 2.6.10 is a malicious PyPI package that executes code during installation by overriding the setup.py install command. This code collects and exfiltrates basic system information, including IP address and username, from the host machine. The package does not provide any legitimate functionality and is likely intended for reconnaissance or low-level data gathering. There is no indication of further payloads or exploitation beyond this information leakage.

The impact is limited to the unauthorized collection and exfiltration of basic host information such as IP address and username. This may aid attackers in reconnaissance or profiling of affected systems but does not directly lead to system compromise or data destruction based on the available data.

No official patch or remediation is indicated. Users should avoid installing or importing the affected version (=2.6.10) of flyteplugins-redis. Since this is a malicious package on PyPI, users should verify package authenticity before installation and consider using trusted package sources or mirrors. Removal of the package and any collected data is recommended if already installed.