trezortranslate (PyPI): malicious package exfiltrates host info on install/import (no CVE)
Severity: medium · Patch status: no-fix-needed · Since 2026-11-14
GitHub Advisory Database (GHSA-9fc6-4mrc-h6pp, published 2026-11-14) flags the PyPI package trezortranslate as malicious. Versions 0.0.0 and 1.0.0 override the install command in setup.py to execute code during pip install, and installing or importing the module exfiltrates basic host information such as IP address and username; the package has no legitimate purpose. Classified by the source as PROBABLYPENTEST under the GENERIC-standard-pypi-install-pentest campaign with limited risk. No patched versions exist — the package is malware and should be removed, not upgraded. Anyone who installed it via pip is affected; no in-the-wild exploitation beyond the package's own behavior is reported.
What to do
- Search environments and dependency lockfiles for trezortranslate and uninstall it if present
- Treat hosts where it was installed as potentially exposed: rotate credentials of the affected user, review network egress logs for exfiltration
- Block/flag the package name in internal PyPI mirrors and CI dependency scanning
- Audit pip install logs and setup.py-driven builds for unexpected network activity
Sources
All live incidents on Threat Watch
