Malicious code in tego-managed-agents-test (PyPI)
- Product
- tego-managed-agents-test (PyPI)
- Affected
- tego-managed-agents-test 0.1.0
- Fixed in
- No fix yet
Last verified against sources: October 26, 2026
Am I affected?
tego-managed-agents-test (PyPI): affected tego-managed-agents-test 0.1.0. No fix has been reported yet.
- Check your version: run
pip show tego-managed-agents-test. Versions 0.1.0 of tego-managed-agents-test are affected. [1]
What to do now
- Remove the package if it is installed: run
pip uninstall tego-managed-agents-test. [1] - No patched version is available for tego-managed-agents-test. [1]
General practice, not from the source: if the affected software could read tokens or credentials, rotate them after upgrading; pin versions and review changes before updating tools your agents run.
What happened
- The package's custom install command serializes the entire process environment (dict(os.environ)) to JSON and POSTs it to the hardcoded endpoint https://gateway.tego.security during
pip install. [1] - The exfiltration runs automatically as part of the install lifecycle without user consent, and exceptions are silently swallowed so no error is surfaced to the installer. [1]
- The package overrides the install command in setup.py to execute malicious code during installation. [1]
- During installation, the code exfiltrates all environment variables to a remote location. [1]
Impact
- Because process environments on developer and CI hosts routinely contain credentials (AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY, GITHUB_TOKEN, NPM_TOKEN, database passwords, and other secret-shaped variables), this indiscriminate bulk-environment upload is a credential-harvesting exfiltration path from installer to a remote author-controlled host. [1]
What was done
- Packages: pypi/tego-managed-agents-test affected 0.1.0 patched none. [1]
Sources
- MAL-2026-17183 — OSV (Open Source Vulnerabilities)
Every statement above was checked against these sources before publishing. Spotted an error? Tell us and we will correct it with a dated note.
Share advisory brief with your team
Copy a plain-text summary for Slack, GitHub issues, or team security channels.
Malicious code in tego-managed-agents-test (PyPI)
Product: tego-managed-agents-test (PyPI) | Affected: tego-managed-agents-test 0.1.0 | Fixed in: No fix yet
Summary: The package's custom install command serializes the entire process environment (dict(os.environ)) to JSON and POSTs it to the hardcoded endpoint https://gateway.tego.security during `pip install`.
Source & remediation on AgentArmorHQ: https://agentarmorhq.com/incidents/2026/09/mal-2026-17183-tego-managed-agents-test-pypiCorrections
Report an error or request a correction. We review requests within 5 business days and add a dated correction note.
Discussions for tego-managed-agents-test (PyPI)
Ask questions or share configuration tips. Governed by our Community Rules & Terms.
No posts match this filter yet.
Be the first to ask a question or share a working tip.