MalwarePublished 15 Oct 2026Updated 29 Oct 2026

py-worm (PyPI) · Malicious Code

Affects py-wormSource GCVE Database

Malicious package : remove py-worm and rotate any secrets on hosts that installed it.

Data as of 29 Oct 2026, 18:07 UTC

Classification

Malicious package

Published to PyPI · OSV MAL-2026-17883

What to do

Remove py-worm from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
PyPIpy-worm	Affected =0.1.0 =2.0.0 =2.0.1	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The py-worm package on PyPI contains malicious code in its agentaix module that downloads and executes a mutable remote Python script without user visibility on Windows. This remote script acts as a remote access trojan (RAT), enabling persistence via an HKCU Run registry entry, polling a command server for instructions, and supporting file upload, download, deletion, and command execution. Versions 0.1.0, 2.0.0, and 2.0.1 of py-worm are affected. The remote payload is mutable, meaning its exact behavior can change over time. This package is classified as malware due to its clear intent to exfiltrate files, maintain persistence, and execute remote commands.

Impact

The malicious py-worm package enables attackers to execute arbitrary commands remotely on victim machines, exfiltrate files, and maintain persistence through registry autorun entries. This compromises system confidentiality, integrity, and availability by allowing unauthorized remote control and data theft. The mutable nature of the remote payload increases risk as attackers can update the malicious code dynamically. The package's installation and execution of this code pose a significant threat to affected systems.

Defensive guidance

Users should immediately uninstall the py-worm package versions 0.1.0, 2.0.0, and 2.0.1 and avoid installing or importing this package. Monitor systems for persistence artifacts such as HKCU Run registry entries related to this malware. Since the remote payload is mutable and executed silently, blocking network access to the indicated URLs and scanning for suspicious Python files may help. Consider using trusted package sources and verifying package integrity before installation.

Summary

Importing the py-worm package's agentaix module triggers the download of a remote Python file from a GitHub URL, which is then executed silently on Windows systems. The remote file's Git history reveals it functions as a Windows remote file management client with persistence via the HKCU Run registry key, polling a remote server for commands, and capabilities for file operations and command execution. This behavior is present in py-worm versions 0.1.0 and 2.0.0 directly during import, and in version 2.0.1 via a daemon thread started on import. The remote file is mutable, so its exact payload at any time is not fixed. The package's CLI and GUI entry points import this malicious module, facilitating execution. The campaign associated with this malware is identified as 2026-10-agentaix, and the package is confirmed malicious based on its RAT functionality, persistence mechanisms, and file exfiltration capabilities.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 29 Oct 2026, 18:07 UTC

Technical details

References

Community reviews