If this package is installed
Remove it, treat the machine (or CI runner) as compromised, and rotate every secret, token and key it could access — from a different, clean machine.
Details
Source: amazon-inspector (a214411b19c9576191a2bde7b40d921418dc236bcfac35cab6e467d7c879667b)
filipt 0.1.5 bundles a 34MB unsigned Windows PE (filipt/Helper.exe) and arranges for it to run both at install time and on every subsequent Python interpreter start. setup.py's custom build_py.run() copies Helper.exe to %TEMP% and launches it detached via subprocess.Popen with DETACHED_PROCESS | CREATE_NEW_PROCESS_GROUP during 'pip install' on Windows. bdist_wheel.run() rewrites the produced wheel to inject a filipt.pth file into site-packages containing 'import filipt._launch; filipt._launch.fire_once()'; because Python's site module auto-executes.pth import lines at interpreter startup, every subsequent 'python' invocation re-copies Helper.exe to a unique %TEMP% path and spawns it detached (a per-version marker caps it to once per interpreter start per version). The binary itself imports BCryptOpenAlgorithmProvider / BCryptGenerateSymmetricKey / BCryptDecrypt, VirtualProtect, CreateProcessA, and reads USERDOMAIN / USERNAME via GetEnvironmentVariableA, and contains large high-entropy regions and a base64 alphabet — the shape of a packed/encrypted loader whose real payload is decrypted at runtime and not statically visible. Publisher metadata is a placeholder (github.com/example/utilities), the binary is unsigned, and nothing about this behavior is documented. The.pth injection means harm is not limited to install time or to imports of filipt — any Python process started on a machine where filipt is installed re-runs the opaque binary.
Source: kam193 (71274850343391005d2d9594031bd612ad45b58389feeb4e416481d3c8b5e3e2)
The package ships a malicious executable started during the building of a wheel/installation. It has been identified as malicious by multiple vendors.
---
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2026-11-filipt
Reasons (based on the campaign):
- The package overrides the install command in setup.py to execute malicious code during installation.
- malware
- rat