pullgetsage (PyPI) · Malicious Code
Affects pullgetsageSource GCVE Database
Malicious package : remove pullgetsage and rotate any secrets on hosts that installed it.
Data as of 23 Sep 2026, 06:23 UTC
Malicious package
Published to PyPI · OSV MAL-2026-16366
What to do
Remove pullgetsage from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| PyPIpullgetsage | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
Description
The pullgetsage package on PyPI contains malicious code that exfiltrates Telegram Desktop session data. Upon import, it archives the Telegram Desktop 'tdata' directory, which holds session keys, and sends it to a hardcoded external endpoint. This enables full account takeover of the installer's Telegram account. The malicious behavior is disguised with misleading identifiers and silent error handling. The package falsely claims to be a library filled with books, unrelated to Telegram functionality.