wayspiritmcp-weather

{"modified":"2026-04-22T21:23:32Z","published":"2025-11-05T21:16:52Z","schema_version":"1.7.4","id":"MAL-2025-191927","summary":"Malicious code in wayspiritmcp-weather (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (c3dbe830c7b2364daef2e4634c16062b86b0b26b88f95533e9413aa91bc646fd)\nPackage seems to provide an MCP server, but in fact contains attempts to make an LLM agent break safeguards. As the request is about leaves just a flag, it seems to be research.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: 2025-11-wayspirit\n\n\nReasons (based on the campaign):\n\n\n - llm-threat\n","affected":[{"package":{"ecosystem":"PyPI","name":"wayspiritmcp-weather"},"versions":["0.8.0","0.7.15","0.7.14","0.7.13","0.7.12","0.7.11","0.7.10","0.7.9","0.7.8","0.7.7","0.7.6","0.7.5","0.7.4","0.7.3","0.7.2","0.7.1","0.7.0","0.6.3","0.6.2","0.6.1","0.6.0","0.5.1","0.5.0","0.4.6","0.4.5","0.4.4","0.4.3","0.4.2","0.4.1","0.4.0","0.3.4","0.3.3","0.3.2","0.3.1","0.3.0","0.2.9","0.2.8","0.2.7","0.2.6","0.2.5","0.2.4","0.2.3","0.2.2","0.2.1","0.1.11","0.1.10","0.1.9","0.1.8","0.1.7","0.1.6","0.1.5","0.1.4","0.1.3","0.1.2","0.1.1","0.1.0"]}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/wayspiritmcp-weather"}],"credits":[{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"]},{"name":"Kamil Mańkowski (kam193)","type":"REPORTER","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"]}],"database_specific":{"malicious-packages-origins":[{"source":"kam193","sha256":"1912a9f32d32b7620d986ec2a9fe13bef75616ae7f641319121559ac59c02241","import_time":"2025-12-02T22:30:56.504142589Z","id":"pypi/2025-11-wayspirit/wayspiritmcp-weather","modified_time":"2025-11-05T21:38:24.270137Z","versions":["0.8.0","0.7.15","0.7.14","0.7.13","0.7.12","0.7.11","0.7.10","0.7.9","0.7.8","0.7.7","0.7.6","0.7.5","0.7.4","0.7.3","0.7.2","0.7.1","0.7.0","0.6.3","0.6.2","0.6.1","0.6.0","0.5.1","0.5.0","0.4.6","0.4.5","0.4.4","0.4.3","0.4.2","0.4.1","0.4.0","0.3.4","0.3.3","0.3.2","0.3.1","0.3.0","0.2.9","0.2.8","0.2.7","0.2.6","0.2.5","0.2.4","0.2.3","0.2.2","0.2.1","0.1.11","0.1.10","0.1.9","0.1.8","0.1.7","0.1.6","0.1.5","0.1.4","0.1.3","0.1.2","0.1.1","0.1.0","0.8.0","0.7.9","0.7.8","0.7.7","0.7.5","0.7.6","0.7.4","0.7.3","0.7.2","0.7.15","0.7.14","0.7.11","0.7.13","0.7.12","0.7.10","0.7.1","0.6.3","0.7.0","0.6.2","0.6.1","0.6.0","0.5.1","0.5.0","0.4.5","0.4.6","0.4.4","0.4.3","0.4.2","0.4.1","0.4.0","0.3.4","0.3.3","0.3.2","0.3.1","0.3.0","0.2.9","0.2.8","0.2.7","0.2.6","0.2.5","0.2.4","0.2.3","0.2.2","0.1.10","0.1.11","0.2.1"]},{"source":"kam193","sha256":"c3dbe830c7b2364daef2e4634c16062b86b0b26b88f95533e9413aa91bc646fd","import_time":"2025-12-02T23:07:19.68844016Z","id":"pypi/2025-11-wayspirit/wayspiritmcp-weather","modified_time":"2025-11-05T21:38:24.270137Z","versions":["0.8.0","0.7.15","0.7.14","0.7.13","0.7.12","0.7.11","0.7.10","0.7.9","0.7.8","0.7.7","0.7.6","0.7.5","0.7.4","0.7.3","0.7.2","0.7.1","0.7.0","0.6.3","0.6.2","0.6.1","0.6.0","0.5.1","0.5.0","0.4.6","0.4.5","0.4.4","0.4.3","0.4.2","0.4.1","0.4.0","0.3.4","0.3.3","0.3.2","0.3.1","0.3.0","0.2.9","0.2.8","0.2.7","0.2.6","0.2.5","0.2.4","0.2.3","0.2.2","0.2.1","0.1.11","0.1.10","0.1.9","0.1.8","0.1.7","0.1.6","0.1.5","0.1.4","0.1.3","0.1.2","0.1.1","0.1.0","0.8.0","0.7.9","0.7.8","0.7.7","0.7.5","0.7.6","0.7.4","0.7.3","0.7.2","0.7.15","0.7.14","0.7.11","0.7.13","0.7.12","0.7.10","0.7.1","0.6.3","0.7.0","0.6.2","0.6.1","0.6.0","0.5.1","0.5.0","0.4.5","0.4.6","0.4.4","0.4.3","0.4.2","0.4.1","0.4.0","0.3.4","0.3.3","0.3.2","0.3.1","0.3.0","0.2.9","0.2.8","0.2.7","0.2.6","0.2.5","0.2.4","0.2.3","0.2.2","0.1.10","0.1.11","0.2.1"]},{"source":"kam193","sha256":"964f7b61870df92413da3344a6c03271c4f1cb91fe8159d0ce0b87dd2e9a7361","import_time":"2025-12-30T22:39:04.369631178Z","id":"pypi/2025-11-wayspirit/wayspiritmcp-weather","modified_time":"2025-11-05T21:38:24.270137Z","versions":["0.1.0","0.1.1","0.1.2","0.1.3","0.1.4","0.1.5","0.1.6","0.1.7","0.1.8","0.1.9","0.1.10","0.1.10","0.1.11","0.1.11","0.2.1","0.2.1","0.2.2","0.2.2","0.2.3","0.2.3","0.2.4","0.2.4","0.2.5","0.2.5","0.2.6","0.2.6","0.2.7","0.2.7","0.2.8","0.2.8","0.2.9","0.2.9","0.3.0","0.3.0","0.3.1","0.3.1","0.3.2","0.3.2","0.3.3","0.3.3","0.3.4","0.3.4","0.4.0","0.4.0","0.4.1","0.4.1","0.4.2","0.4.2","0.4.3","0.4.3","0.4.4","0.4.4","0.4.5","0.4.5","0.4.6","0.4.6","0.5.0","0.5.0","0.5.1","0.5.1","0.6.0","0.6.0","0.6.1","0.6.1","0.6.2","0.6.2","0.6.3","0.6.3","0.7.0","0.7.0","0.7.1","0.7.1","0.7.2","0.7.2","0.7.3","0.7.3","0.7.4","0.7.4","0.7.5","0.7.5","0.7.6","0.7.6","0.7.7","0.7.7","0.7.8","0.7.8","0.7.9","0.7.9","0.7.10","0.7.10","0.7.11","0.7.11","0.7.12","0.7.12","0.7.13","0.7.13","0.7.14","0.7.14","0.7.15","0.7.15","0.8.0","0.8.0"]},{"source":"kam193","sha256":"d8974676d46d2859c016fc49b2f45c393073cfae7d1698aa80762f0e25db1f11","import_time":"2026-04-22T21:21:55.654179524Z","id":"pypi/2025-11-wayspirit/wayspiritmcp-weather","modified_time":"2025-11-05T21:38:24.270137Z","versions":["0.1.0","0.1.1","0.1.2","0.1.3","0.1.4","0.1.5","0.1.6","0.1.7","0.1.8","0.1.9","0.1.10","0.1.11","0.2.1","0.2.2","0.2.3","0.2.4","0.2.5","0.2.6","0.2.7","0.2.8","0.2.9","0.3.0","0.3.1","0.3.2","0.3.3","0.3.4","0.4.0","0.4.1","0.4.2","0.4.3","0.4.4","0.4.5","0.4.6","0.5.0","0.5.1","0.6.0","0.6.1","0.6.2","0.6.3","0.7.0","0.7.1","0.7.2","0.7.3","0.7.4","0.7.5","0.7.6","0.7.7","0.7.8","0.7.9","0.7.10","0.7.11","0.7.12","0.7.13","0.7.14","0.7.15","0.8.0"]}]}}