Malicious Package Affecting semantic-router package, versions [0.1.8,0.1.15)
Threat Intelligence
Snyk has reported that there have been attempts or successful attacks targeting this vulnerability.
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-PYTHON-SEMANTICROUTER-17675242
- published29 Jun 2026
- disclosed26 Jun 2026
- creditUnknown
Introduced: 26 Jun 2026
Malicious CVE NOT AVAILABLE CWE-506 (opens in a new tab)How to fix?
Upgrade semantic-router to version 0.1.15 or higher.
Overview
semantic-router is a malicious package.
in the litellm_init.pth process. An attacker can gain unauthorized access to sensitive information, including environment variables, cloud credentials, SSH keys, database credentials, and other secrets, by executing malicious code during Python interpreter startup without requiring an import. The collected data is encrypted and exfiltrated to an external server. This is only exploitable if a fresh installation occurred during the period when the compromised dependency version was available on the package repository.
Workaround
This vulnerability can be mitigated by explicitly pinning the dependency to a safe version, auditing the installation directory for malicious files, and rotating any potentially exposed credentials.