Malicious PyPI package dbt-adapter exfiltrates host info on install/import (no CVE)
Severity: high · Patch status: no-fix-needed · Since 2026-11-05
GitHub Advisory Database published GHSA-jcpx-v43r-522m on 2026-11-05 flagging the PyPI package dbt-adapter as malicious. Installing the package or importing the module exfiltrates basic host information such as IP address and username, and the package has no other purpose. The package overrides the install command in setup.py to execute malicious code during installation. Affected versions are 0.0.0 and 0.1.0a2; there are no patched versions, and the package is classified as malware (CWE-506) under the OpenSSF malicious-packages project and kam193's bad-packages database. Anyone who installed or imported dbt-adapter from PyPI is affected; the legitimate dbt adapter ecosystem is not implicated. Remediation is removal of the package and investigation of the exfiltrated host data.
What to do
- Remove dbt-adapter from all environments and dependency files; do not install or import it
- Audit systems where it was installed for signs of data exfiltration (IP, username) and rotate any credentials on those hosts
- Check pip install logs and CI pipelines for historical installs of the package
- Block the package name in internal PyPI mirrors/proxies and pin verified dependencies with hashes
- Prefer the official dbt adapters (dbt-postgres, dbt-snowflake, etc.) from verified publishers
Sources
All live incidents on Threat Watch
