MAL-2025-191927
See a problem?- Import Source
- https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/wayspiritmcp-weather/MAL-2025-191927.json
- JSON Data
- https://api.osv.dev/v1/vulns/MAL-2025-191927
- Published
- 2025-11-05T21:16:52Z
- Modified
- 2026-04-22T21:35:31.651461Z
- Summary
- Malicious code in wayspiritmcp-weather (PyPI)
- Details
-
-= Per source details. Do not edit below this line.=-
Source: kam193 (c3dbe830c7b2364daef2e4634c16062b86b0b26b88f95533e9413aa91bc646fd)
Package seems to provide an MCP server, but in fact contains attempts to make an LLM agent break safeguards. As the request is about leaves just a flag, it seems to be research.
Category: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.
Campaign: 2025-11-wayspirit
Reasons (based on the campaign):
- llm-threat
- Database specific
{ "malicious-packages-origins": [ { "modified_time": "2025-11-05T21:38:24.270137Z", "versions": [ "0.8.0", "0.7.15", "0.7.14", "0.7.13", "0.7.12", "0.7.11", "0.7.10", "0.7.9", "0.7.8", "0.7.7", "0.7.6", "0.7.5", "0.7.4", "0.7.3", "0.7.2", "0.7.1", "0.7.0", "0.6.3", "0.6.2", "0.6.1", "0.6.0", "0.5.1", "0.5.0", "0.4.6", "0.4.5", "0.4.4", "0.4.3", "0.4.2", "0.4.1", "0.4.0", "0.3.4", "0.3.3", "0.3.2", "0.3.1", "0.3.0", "0.2.9", "0.2.8", "0.2.7", "0.2.6", "0.2.5", "0.2.4", "0.2.3", "0.2.2", "0.2.1", "0.1.11", "0.1.10", "0.1.9", "0.1.8", "0.1.7", "0.1.6", "0.1.5", "0.1.4", "0.1.3", "0.1.2", "0.1.1", "0.1.0", "0.8.0", "0.7.9", "0.7.8", "0.7.7", "0.7.5", "0.7.6", "0.7.4", "0.7.3", "0.7.2", "0.7.15", "0.7.14", "0.7.11", "0.7.13", "0.7.12", "0.7.10", "0.7.1", "0.6.3", "0.7.0", "0.6.2", "0.6.1", "0.6.0", "0.5.1", "0.5.0", "0.4.5", "0.4.6", "0.4.4", "0.4.3", "0.4.2", "0.4.1", "0.4.0", "0.3.4", "0.3.3", "0.3.2", "0.3.1", "0.3.0", "0.2.9", "0.2.8", "0.2.7", "0.2.6", "0.2.5", "0.2.4", "0.2.3", "0.2.2", "0.1.10", "0.1.11", "0.2.1" ], "sha256": "1912a9f32d32b7620d986ec2a9fe13bef75616ae7f641319121559ac59c02241", "id": "pypi/2025-11-wayspirit/wayspiritmcp-weather", "source": "kam193", "import_time": "2025-12-02T22:30:56.504142589Z" }, { "modified_time": "2025-11-05T21:38:24.270137Z", "versions": [ "0.8.0", "0.7.15", "0.7.14", "0.7.13", "0.7.12", "0.7.11", "0.7.10", "0.7.9", "0.7.8", "0.7.7", "0.7.6", "0.7.5", "0.7.4", "0.7.3", "0.7.2", "0.7.1", "0.7.0", "0.6.3", "0.6.2", "0.6.1", "0.6.0", "0.5.1", "0.5.0", "0.4.6", "0.4.5", "0.4.4", "0.4.3", "0.4.2", "0.4.1", "0.4.0", "0.3.4", "0.3.3", "0.3.2", "0.3.1", "0.3.0", "0.2.9", "0.2.8", "0.2.7", "0.2.6", "0.2.5", "0.2.4", "0.2.3", "0.2.2", "0.2.1", "0.1.11", "0.1.10", "0.1.9", "0.1.8", "0.1.7", "0.1.6", "0.1.5", "0.1.4", "0.1.3", "0.1.2", "0.1.1", "0.1.0", "0.8.0", "0.7.9", "0.7.8", "0.7.7", "0.7.5", "0.7.6", "0.7.4", "0.7.3", "0.7.2", "0.7.15", "0.7.14", "0.7.11", "0.7.13", "0.7.12", "0.7.10", "0.7.1", "0.6.3", "0.7.0", "0.6.2", "0.6.1", "0.6.0", "0.5.1", "0.5.0", "0.4.5", "0.4.6", "0.4.4", "0.4.3", "0.4.2", "0.4.1", "0.4.0", "0.3.4", "0.3.3", "0.3.2", "0.3.1", "0.3.0", "0.2.9", "0.2.8", "0.2.7", "0.2.6", "0.2.5", "0.2.4", "0.2.3", "0.2.2", "0.1.10", "0.1.11", "0.2.1" ], "sha256": "c3dbe830c7b2364daef2e4634c16062b86b0b26b88f95533e9413aa91bc646fd", "id": "pypi/2025-11-wayspirit/wayspiritmcp-weather", "source": "kam193", "import_time": "2025-12-02T23:07:19.68844016Z" }, { "modified_time": "2025-11-05T21:38:24.270137Z", "versions": [ "0.1.0", "0.1.1", "0.1.2", "0.1.3", "0.1.4", "0.1.5", "0.1.6", "0.1.7", "0.1.8", "0.1.9", "0.1.10", "0.1.10", "0.1.11", "0.1.11", "0.2.1", "0.2.1", "0.2.2", "0.2.2", "0.2.3", "0.2.3", "0.2.4", "0.2.4", "0.2.5", "0.2.5", "0.2.6", "0.2.6", "0.2.7", "0.2.7", "0.2.8", "0.2.8", "0.2.9", "0.2.9", "0.3.0", "0.3.0", "0.3.1", "0.3.1", "0.3.2", "0.3.2", "0.3.3", "0.3.3", "0.3.4", "0.3.4", "0.4.0", "0.4.0", "0.4.1", "0.4.1", "0.4.2", "0.4.2", "0.4.3", "0.4.3", "0.4.4", "0.4.4", "0.4.5", "0.4.5", "0.4.6", "0.4.6", "0.5.0", "0.5.0", "0.5.1", "0.5.1", "0.6.0", "0.6.0", "0.6.1", "0.6.1", "0.6.2", "0.6.2", "0.6.3", "0.6.3", "0.7.0", "0.7.0", "0.7.1", "0.7.1", "0.7.2", "0.7.2", "0.7.3", "0.7.3", "0.7.4", "0.7.4", "0.7.5", "0.7.5", "0.7.6", "0.7.6", "0.7.7", "0.7.7", "0.7.8", "0.7.8", "0.7.9", "0.7.9", "0.7.10", "0.7.10", "0.7.11", "0.7.11", "0.7.12", "0.7.12", "0.7.13", "0.7.13", "0.7.14", "0.7.14", "0.7.15", "0.7.15", "0.8.0", "0.8.0" ], "sha256": "964f7b61870df92413da3344a6c03271c4f1cb91fe8159d0ce0b87dd2e9a7361", "id": "pypi/2025-11-wayspirit/wayspiritmcp-weather", "source": "kam193", "import_time": "2025-12-30T22:39:04.369631178Z" }, { "modified_time": "2025-11-05T21:38:24.270137Z", "versions": [ "0.1.0", "0.1.1", "0.1.2", "0.1.3", "0.1.4", "0.1.5", "0.1.6", "0.1.7", "0.1.8", "0.1.9", "0.1.10", "0.1.11", "0.2.1", "0.2.2", "0.2.3", "0.2.4", "0.2.5", "0.2.6", "0.2.7", "0.2.8", "0.2.9", "0.3.0", "0.3.1", "0.3.2", "0.3.3", "0.3.4", "0.4.0", "0.4.1", "0.4.2", "0.4.3", "0.4.4", "0.4.5", "0.4.6", "0.5.0", "0.5.1", "0.6.0", "0.6.1", "0.6.2", "0.6.3", "0.7.0", "0.7.1", "0.7.2", "0.7.3", "0.7.4", "0.7.5", "0.7.6", "0.7.7", "0.7.8", "0.7.9", "0.7.10", "0.7.11", "0.7.12", "0.7.13", "0.7.14", "0.7.15", "0.8.0" ], "sha256": "d8974676d46d2859c016fc49b2f45c393073cfae7d1698aa80762f0e25db1f11", "id": "pypi/2025-11-wayspirit/wayspiritmcp-weather", "source": "kam193", "import_time": "2026-04-22T21:21:55.654179524Z" } ] }- References
- Credits
-
-
- Kamil Mańkowski (kam193)
-
- Kamil Mańkowski (kam193) - REPORTER
-
Affected packages
PyPI / wayspiritmcp-weather
Package
- Name
- wayspiritmcp-weather
- View open source insights on deps.dev
- Purl
- pkg:pypi/wayspiritmcp-weather
Affected versions
0.*
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.1.10
0.1.11
0.2.1
0.2.2
0.2.3
0.2.4
0.2.5
0.2.6
0.2.7
0.2.8
0.2.9
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.7.10
0.7.11
0.7.12
0.7.13
0.7.14
0.7.15
0.8.0