Which versions of buddyme are malicious?

The following PyPI versions of buddyme are flagged malicious: 0.2.3, 0.2.5. Treat any of these as compromised.

How do I remediate buddyme if I installed it?

Remove buddyme from your project and lockfile, then assume any secrets accessible to the build or runtime were exposed: rotate API keys, tokens, and credentials, and audit for unexpected outbound activity or persistence.

I already installed buddyme — how do I know if it already compromised me?

If buddyme was installed, its post-install payload may already have run. Removing the package does not undo that — check outbound connections and credential use from the install window onward.

Is buddyme part of a known attack campaign?

Yes — buddyme is associated with the IN-MAL-2026-003267, IN-MAL-2026-003273 campaign. Packages in the same campaign often share infrastructure and payloads, so check whether any related packages are also in your dependency tree.

How do I find buddyme across my projects, lockfiles, and CI pipelines?

Search your lockfiles and build artifacts for buddyme (2 malicious versions).

Malicious package

buddymePyPI

Advisory published May 19, 2026Updated May 26, 2026

buddyme is a confirmed malicious PyPI package (MAL-2026-4743) that executes malicious code on install (malicious versions 0.2.3, 0.2.5). Do not install it — remove it immediately and rotate any exposed credentials.

Malicious code in buddyme (PyPI)

MAL-2026-4743

Immediate action

Remove the package, then rotate any secrets the build/runtime could reach.

pip uninstall buddyme

What this malware does

buddyme advertises a CLI agent. When installed and run, the default REPL routes every prompt the user types to third-party LLM providers (Zhipu GLM at open.bigmodel.cn, DeepSeek, Baidu ERNIE, Aliyun Qwen, Xiaomi Mimo) using API keys hardcoded in buddyMe/llm_moudle/model_config.py. The default tool registration also includes BaiduSearchTool, which carries a hardcoded Baidu Qianfan API key (DEFAULT_API_KEY in buddyMe/tool_moudle/baidu_search_tool.py) and POSTs every agent-issued search query to qianfan.baidubce.com/v2/ai_search/web_search under the author's account. Users supply no key, receive no disclosure, and cannot tell that their prompts and search terms are visible to the author's vendor accounts and billed to those accounts. The hardcoded destination + caller-supplied content flowing to it is the silent-relay shape: installers running the documented CLI have their inputs and search queries silently relayed to author-controlled third-party endpoints. Seven live third-party API keys are also embedded in importable source, allowing any installer to extract and abuse the author's paid quotas — a secondary concern below the silent-relay primary.

Malicious versions

2 flagged

0.2.30.2.5

Indicators of compromise (SHA-256)

5b7be8ff57692a4bc6457ee68abfe955050361228ba923c31c4a0e5b69c953f2

6f4ae4b8c00d27e82d54a5d2d960b1dc4f40ba15bc938355bad8421c338d6ef6

Detection & response playbook

Malicious package

Find it
Search your lockfiles and build artifacts for buddyme (2 malicious versions).
If you installed it — respond
Remove buddyme from your project and lockfile, then assume any secrets accessible to the build or runtime were exposed: rotate API keys, tokens, and credentials, and audit for unexpected outbound activity or persistence.
Did it already run?
If buddyme was installed, its post-install payload may already have run. Removing the package does not undo that — check outbound connections and credential use from the install window onward.

Frequently asked questions

No. buddyme on PyPI has been identified as a malicious package (versions 0.2.3, 0.2.5 flagged). It should be removed immediately — do not install or keep it in your dependency tree.

Campaign

IN-MAL-2026-003267IN-MAL-2026-003273

References

Credits

Amazon Inspector · finder

Detect & block this

O3 blocks buddyme-class packages before install and in CI — and if it already ran, its runtime egress monitoring catches the malicious outbound activity and severs the channel.

Malware detection Runtime egress monitoring

Explore

All malware advisories How O3 detects malware Vulnerability database