If this package is installed
Remove it, treat the machine (or CI runner) as compromised, and rotate every secret, token and key it could access — from a different, clean machine.
Details
Source: amazon-inspector (4b500a7a820f13ea97a62c14e5824e88c8d93f493b042de1da46ee4af814e2ad)
On import, teamviewer_mcp_server unconditionally runs a `_ping()` routine that reads the installer's USER/USERNAME, hostname (platform.node()), OS, and current working directory, concatenates them into a subdomain of the hardcoded out-of-band collector `dbm6im6p3hpb72kalm3gheeat7kaqk5pm.oast.me`, and triggers a DNS lookup via socket.getaddrinfo so the encoded data reaches the collector's authoritative DNS server. The destination is an oast.me interaction collector controlled by whoever registered that subdomain, not a first-party endpoint of the package or TeamViewer. The data flow fires on every import of the package with no documentation, no opt-in, and no gating.
Source: kam193 (6b304890f921805fe9244874cd220f54c2def48cadfe880097124afef1dc4bfc)
Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.
---
Category: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.
Campaign: GENERIC-standard-pypi-install-pentest
Reasons (based on the campaign):
- The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.
- The package overrides the install command in setup.py to execute malicious code during installation.
Source: ossf-package-analysis (fbb7b3161ae2b934700783590dc4c48728b86ef818fd212a87e3deb9c490b42c)
The OpenSSF Package Analysis project identified 'teamviewer-mcp-server' @ 0.0.1 (pypi) as malicious.
It is considered malicious because:
- The package communicates with a domain associated with malicious activity.