bundyfed PyPI malware: malicious setup.py downloads infostealer during install
Severity: critical · Patch status: no-fix-needed · Since 2026-11-09
The PyPI package bundyfed (versions 1.0.0 and 1.0.1) is malicious: its setup.py overrides the install command to download and execute a remote executable containing an infostealer, compromising any developer or CI environment that installs the package. GitHub Advisory Database entry GHSA-w2rp-hfm9-fh77 (campaign 2026-11-bundyfed, CWE-506) was published 2026-11-09 with credit to OpenSSF's malicious-packages project and kam193's bad-packages analysis. There are no patched versions — the package is malware and should be removed, not upgraded. Anyone who installed bundyfed should assume credential and data theft from the affected machine.
What to do
- Remove bundyfed from all environments and dependency trees; do not install or pin it
- Treat any machine or CI runner that installed bundyfed as compromised: rotate stored credentials, tokens, and keys
- Review browser-saved passwords, SSH keys, and cloud credentials for exfiltration; check for the downloaded executable
- Block the package name in internal PyPI mirrors/proxies and alert developers who may have installed it
- Audit install logs to determine exposure window and scope
Sources
All live incidents on Threat Watch
