VV-242mediumSupply chain2026-11-05
Malicious code in teamviewer-mcp-server (PyPI)
Malicious code in teamviewer-mcp-server (PyPI).
What it is
--- _-= Per source details. Do not edit below this line.=-_
Source: kam193 (6b304890f921805fe9244874cd220f54c2def48cadfe880097124afef1dc4bfc) Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.
Category: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.
How to check
- Affected: teamviewer-mcp-server (pip) 0.0.1.
- Compare your installed version with the range above (command below).
How to fix
- Uninstall teamviewer-mcp-server (pip uninstall teamviewer-mcp-server); there is no safe version.
- Treat any machine that installed it as having leaked basic host info (IP, username).
pip show teamviewer-mcp-server | grep VersionSources
More advisories for this tool
- criticalMalicious npm and PyPI packages posing as AI and MCP tools: depfix-ai, agent-trace-kit, @go-gost/mcp-darwin-x64 and my-mcp-server-driving-license-ocr
- criticalMalicious npm packages posing as MCP servers: @rfewqa-fes/mnm-doc-mcp, @lemili9804/mcp-weather-server and mcp-contract-tester
- criticalMalicious code in @bestcoolman/dev-mcp (npm)
- criticalMalicious code in @massnerder/x402-scraper-mcp (npm)