GHSA-93QJ-5Q5V-3C2H: Embedded Malicious Code in pantheon-agents PyPI Packages

Vulnerability ID: GHSA-93QJ-5Q5V-3C2H
CVSS Score: 0.0
Published: 2026-08-26

A supply-chain compromise affecting the pantheon-agents PyPI package, where versions 0.6.1 and 0.6.2 were uploaded with malicious payloads that exfiltrate sensitive environment variables and credentials.

TL;DR

Trojanized versions of pantheon-agents (0.6.1 and 0.6.2) on PyPI executed arbitrary code via a malicious .pth file to install the Bun JS runtime and exfiltrate secrets.

⚠️ Exploit Status: ACTIVE

Technical Details

• Vulnerability Class: CWE-506 (Embedded Malicious Code)
• Attack Vector: PyPI Package Registry Compromise
• CVSS Score: 0.0 (Malicious Package)
• CWE ID: CWE-506, CWE-522
• Exploit Status: Active Malware

Affected Systems

• pantheon-agents
• pantheon-agents: >= 0.6.1, <= 0.6.2 (Fixed in: 0.6.4)

Mitigation Strategies

• Immediate package uninstallation
• Host-based forensic file deletion
• Secret rotation for cloud and package registries
• Adoption of PyPI Trusted Publishing (OIDC)

Remediation Steps:

1. Run 'pip uninstall pantheon-agents'
2. Check and delete any '*-setup.pth' from site-packages
3. Delete '~/.bun' and '~/_index.js'
4. Rotate all credentials including AWS/Azure/GCP keys, .pypirc tokens, .npmrc tokens, and SSH keys

References

• GitHub Advisory Database Entry
• PantheonOS GitHub Repository

Read the full report for GHSA-93QJ-5Q5V-3C2H on our website for more details including interactive diagrams and full exploit analysis.