zagents-message-bus (PyPI): malicious package exfiltrates host info on install/import (no CVE)
Severity: high · Patch status: no-fix-needed · Since 2026-10-25
GitHub Advisory Database published GHSA-2hr3-wchh-6g2q on 2026-10-25 flagging the PyPI package zagents-message-bus as malicious. Installing the package or importing the module exfiltrates basic host information (e.g., IP address, username); the package has no legitimate purpose. It overrides the install command in setup.py to execute malicious code during installation. Affected versions are 1.0.5, 1.0.10, 99.99.99, and 99.99.100, with no patched versions available. Categorized as PROBABLYPENTEST under the GENERIC-standard-pypi-install-pentest campaign with limited risk. Anyone who installed or imported the package should treat the host as potentially compromised and remove the package.
What to do
- Remove zagents-message-bus from all environments and dependency files
- Audit systems where it was installed/imported for exfiltration of host data (IP, username) and signs of further compromise
- Rotate credentials used on affected hosts and review network logs for outbound connections around install time
- Block the package name in internal PyPI mirrors/dependency scanning
- Check CI pipelines and lockfiles for historical use of the package
Sources
All live incidents on Threat Watch
