Supply chain · pip · High

Critical: Malicious 'tego-managed-agents-test' (PyPI) Exfiltrates Environment Variables

Threat Engine Auto-Feed · data current as of 2026-09-25

A malicious PyPI package, 'tego-managed-agents-test' version 0.1.0, has been identified that exfiltrates all environment variables during installation. This poses a critical supply-chain risk, as sensitive credentials and configuration data can be stolen from any system installing the package.

  • Package: pip / tego-managed-agents-test
  • Affected versions: = 0.1.0
  • Severity: critical
  • Reach: unknown
  • Exposure: 65/100 (High)

What happened — Credential / secret theft

The PyPI package 'tego-managed-agents-test' version 0.1.0 contains malicious code designed to exfiltrate all environment variables to a remote location. This occurs during the package's installation process, specifically by overriding the install command in `setup.py` to execute the malicious code.

How the attack works

This is a dependency confusion or typosquatting attack where a malicious package mimics a legitimate one or uses a similar name. When installed, the package executes arbitrary code as part of its setup routine, which in this case involves collecting and transmitting sensitive system information (environment variables) to an external server controlled by the attacker.

Who's exposed

Profiles most at risk

  • Development teams using the PyPI ecosystem
  • CI/CD pipelines that automatically pull and install Python dependencies
  • Any system or user that has installed 'tego-managed-agents-test' version 0.1.0

Conditions that increase exposure

  • Unpinned dependencies in `requirements.txt` or `pyproject.toml` that allow fetching the latest (malicious) version
  • Lack of dependency lockfiles (`poetry.lock`, `Pipfile.lock`) to ensure consistent, verified package versions
  • Automated build systems that install dependencies without prior security scanning or review
  • Use of internal package mirrors that do not vet upstream packages for malicious content

Blast-radius scenarios

  • Attacker gains access to sensitive API keys, database credentials, or other secrets stored as environment variables on the compromised system.
  • Compromised build servers could lead to further supply chain attacks if attacker gains access to signing keys or deployment credentials.
  • Developer workstations could be compromised, leading to lateral movement within the organization.

What to do (defensive)

Detect

  • Scan dependency trees for 'tego-managed-agents-test' version 0.1.0.
  • Monitor network traffic for suspicious outbound connections from build environments or developer machines to unknown IP addresses/domains.
  • Review `setup.py` files of new or suspicious packages for overridden install commands or unusual code execution during installation.

Contain

  • Immediately quarantine any systems identified as having installed 'tego-managed-agents-test' version 0.1.0.
  • Revoke and rotate all credentials and API keys that were present as environment variables on affected systems.
  • Block network access to known malicious exfiltration domains/IPs if identified.

Remediate

  • Remove 'tego-managed-agents-test' version 0.1.0 from all environments.
  • Update dependency management practices to use pinned versions and lockfiles for all production dependencies.
  • Implement automated dependency scanning in CI/CD pipelines to detect known malicious packages.
  • Educate developers on the risks of installing unverified packages and the importance of supply chain security.

Frontier verdict — High

This is a critical supply-chain incident requiring immediate action due to the potential for widespread credential theft from any system installing the malicious PyPI package 'tego-managed-agents-test' version 0.1.0.

Sources

For detection-engineering and awareness only · point-in-time · not security advice · sourced from the GitHub Advisory Database.