Am I affected by Malicious code in claudedashbord (PyPI)? What should I do?

Question

The PyPI package claudedashbord contains malicious code.

Affected: claudedashbord 0.1.0 to 0.1.3. Fixed in: no fix reported yet. What should you check, and what should you do about it?

Full incident page with sources: https://agentarmorhq.com/incidents/2026/09/ghsa-28f3-pmhh-qxcm-claudedashbord

AgentArmor team · Accepted Answer

**Am I affected?**
Affected: claudedashbord 0.1.0 to 0.1.3. Fixed in: no fix reported yet.
- Check your version: run `pip show claudedashbord`. Versions = 0.1.0 of claudedashbord are affected.

**What to do now**
1. Remove the package if it is installed: run `pip uninstall claudedashbord`.
2. No fixed version is available, so there is no upgrade to make yet.

General practice, not from the source: if the affected software could read tokens or credentials, rotate them after upgrading; pin versions and review changes before updating tools your agents run.

**Sources**
- GitHub Advisory Database: https://github.com/advisories/GHSA-28f3-pmhh-qxcm

Full incident page: https://agentarmorhq.com/incidents/2026/09/ghsa-28f3-pmhh-qxcm-claudedashbord

Am I affected by Malicious code in claudedashbord (PyPI)? What should I do?

1 answer

Add your answer or comment