GHSA-93QJ-5Q5V-3C2H: Embedded Malicious Code in pantheon-agents PyPI Packages
Vulnerability ID: GHSA-93QJ-5Q5V-3C2H
CVSS Score: 0.0
Published: 2026-08-26
A supply-chain compromise affecting the pantheon-agents PyPI package, where versions 0.6.1 and 0.6.2 were uploaded with malicious payloads that exfiltrate sensitive environment variables and credentials.
TL;DR
Trojanized versions of pantheon-agents (0.6.1 and 0.6.2) on PyPI executed arbitrary code via a malicious .pth file to install the Bun JS runtime and exfiltrate secrets.
⚠️ Exploit Status: ACTIVE
Technical Details
- Vulnerability Class: CWE-506 (Embedded Malicious Code)
- Attack Vector: PyPI Package Registry Compromise
- CVSS Score: 0.0 (Malicious Package)
- CWE ID: CWE-506, CWE-522
- Exploit Status: Active Malware
Affected Systems
- pantheon-agents
-
pantheon-agents: >= 0.6.1, <= 0.6.2 (Fixed in:
0.6.4)
Mitigation Strategies
- Immediate package uninstallation
- Host-based forensic file deletion
- Secret rotation for cloud and package registries
- Adoption of PyPI Trusted Publishing (OIDC)
Remediation Steps:
- Run 'pip uninstall pantheon-agents'
- Check and delete any '*-setup.pth' from site-packages
- Delete '~/.bun' and '~/_index.js'
- Rotate all credentials including AWS/Azure/GCP keys, .pypirc tokens, .npmrc tokens, and SSH keys
References
Read the full report for GHSA-93QJ-5Q5V-3C2H on our website for more details including interactive diagrams and full exploit analysis.
Top comments (0)