Overlord RAT: filipt PyPI package — malicious setup.py executes RAT during installation (no CVE)
Severity: critical · Patch status: no-fix-needed · Since 2026-11-03
The PyPI package filipt has been identified as malicious: every published version (0.1.0 through 0.1.5) overrides the install command in setup.py so that a malicious executable runs during wheel building/installation. The payload has been identified as Overlord RAT, giving attackers remote access to any developer machine or CI environment where the package is installed. GitHub Advisory Database (GHSA-687f-xhmq-5mwg) and OpenSSF malicious-packages catalogued it on 2026-11-03 as part of campaign 2026-11-filipt, with VirusTotal and tria.ge confirmations. There are no patched versions and no known source code; the package should be treated as fully compromised and removed.
What to do
- Search environments for filipt in dependency files, lockfiles, pip caches and installed site-packages; remove it entirely
- Treat any machine or CI runner where filipt was installed as compromised: isolate, reimage, and rotate credentials, tokens and SSH keys
- Hunt for Overlord RAT indicators, including the VirusTotal hashes 1a89eb45ed45780f16499b0f87ff3dd17db4be0988f7befbfa88224d83fccae2 and e5a585e03e1725d5030fd4854805933d53aa86cfbbb0b3808dffcc63782ddf38
- Block the package name in internal PyPI mirrors/proxies and review install logs for its presence
- Review setup.py install hooks in dependencies and enforce scanning/allowlists for PyPI packages
Sources
All live incidents on Threat Watch
