VV-241mediumSupply chain2026-11-05
Malicious code in mcp-teamviewer (PyPI)
Malicious code in mcp-teamviewer (PyPI).
What it is
--- _-= Per source details. Do not edit below this line.=-_
Source: kam193 (54d27496a09fce8a393650469621dc308a6578c6cf694589bda9d4b298a6c08e) Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.
Category: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.
How to check
- Affected: mcp-teamviewer (pip) 0.0.1.
- Compare your installed version with the range above (command below).
How to fix
- Uninstall mcp-teamviewer (pip uninstall mcp-teamviewer); there is no safe version.
- Treat any machine that installed it as having leaked basic host info (IP, username).
pip show mcp-teamviewer | grep VersionSources
More advisories for this tool
- criticalMalicious npm and PyPI packages posing as AI and MCP tools: depfix-ai, agent-trace-kit, @go-gost/mcp-darwin-x64 and my-mcp-server-driving-license-ocr
- criticalMalicious npm packages posing as MCP servers: @rfewqa-fes/mnm-doc-mcp, @lemili9804/mcp-weather-server and mcp-contract-tester
- criticalMalicious code in @bestcoolman/dev-mcp (npm)
- criticalMalicious code in @massnerder/x402-scraper-mcp (npm)