strands-aidr (PyPI) — malicious package exfiltrates host info on install/import
Severity: critical · Patch status: no-fix-needed · Since 2026-11-05
GitHub Advisory Database (GHSA-5rm4-gf65-6756, published 2026-11-05) flags the PyPI package strands-aidr as malware. Version 9999.0.0 overrides the install command in setup.py so malicious code runs during pip install, and importing the module also exfiltrates basic host information such as IP address and username. The package has no legitimate purpose and there is no patched version — removal is the only remediation. Categorized as PROBABLYPENTEST under the GENERIC-standard-pypi-install-pentest campaign, with limited-risk data exfiltration. Anyone who installed or imported strands-aidr is affected; no in-the-wild exploitation details are given.
What to do
- Check environments and lockfiles for strands-aidr and remove it if present
- Audit pip logs and CI history for installs of strands-aidr version 9999.0.0
- Treat affected hosts as potentially disclosed: rotate credentials, review network egress logs for exfiltration
- Block the package name in internal PyPI mirrors/proxies and alert on install attempts
Sources
All live incidents on Threat Watch
