MalwarePublished 20 Jul 2026Updated 22 Jul 2026

telebot-bot-run (PyPI) · Malicious Code

Affects telebot-bot-runSource GCVE Database

Malicious package : remove telebot-bot-run and rotate any secrets on hosts that installed it.

Data as of 22 Jul 2026, 23:40 UTC

Classification

Malicious package

Published to PyPI · OSV MAL-2026-10863

What to do

Remove telebot-bot-run from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
PyPItelebot-bot-run	Affected =0.5 =0.3 =0.4	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The telebot-bot-run package on PyPI versions 0.3, 0.4, and 0.5 contains malicious code that executes attacker-controlled scripts on the host system. Upon import, it fetches and executes remote Python code from a mutable Pastebin URL, runs a Telegram bot with hardcoded credentials that allows remote command execution, file exfiltration, directory archiving, and persistent background execution. The package is identified as typosquatting and is designed for remote access and control of infected hosts.

Impact

Systems that install telebot-bot-run versions 0.3, 0.4, or 0.5 are subject to full remote code execution by attackers. The attacker can run arbitrary shell commands, exfiltrate any file, archive and upload directories, and maintain persistent control over the infected host. This compromises confidentiality, integrity, and availability of the affected system.

Defensive guidance

Users should immediately uninstall telebot-bot-run versions 0.3, 0.4, and 0.5 if installed. Avoid installing packages from untrusted or typosquatted sources. Monitor for and remove any processes related to this package and revoke any exposed credentials. Check vendor advisories or PyPI for updates or removal of the malicious package.

Summary

The telebot-bot-run package versions 0.3, 0.4, and 0.5 are malicious. On import, the package fetches Python code from a Pastebin URL and executes it directly, enabling arbitrary code execution. It also contains a hardcoded Telegram bot token that starts an infinite polling thread exposing commands such as /ssh (executes shell commands), /get (sends files to the attacker), /collect (archives directories and uploads them), and /start (re-fetches and runs the remote code in the background for persistence). The package metadata is suspicious and consistent with malicious intent. This package is a typosquatting attempt masquerading as a legitimate Telegram bot library and is classified as a Remote Access Trojan (RAT).

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 22 Jul 2026, 23:40 UTC

Technical details

References

Community reviews