Critical Infostealer Vulnerability in blank-lib Package
Summary
MAL-2025-192364: Malicious code in blank-lib (PyPI). Affects blank-lib versions 0.0.8 – 0.1.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The blank-lib package, available on PyPI, is designed for various functionalities within Python applications. However, it has been identified as containing malicious code that acts as an infostealer, specifically based on a variant known as Blank Grabber. This vulnerability poses significant risks to users and applications that depend on this package.
Vulnerability Detail
The vulnerability originates from the inclusion of malicious code in the blank-lib package, specifically versions 0.0.8, 0.0.9, and 0.1.0. This code is designed to exfiltrate sensitive information, such as user credentials, from affected systems. The malicious intent is clear, as the code is intentionally embedded in the package's dependencies, making it a serious threat to any application utilizing blank-lib.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall blank-libIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can remove the blank-lib package from their projects and replace it with a secure alternative until a patched version is confirmed. This can be done using the command: pip uninstall blank-lib.
Conclusion
The blank-lib package has been identified as containing malicious code that poses a serious threat to users and applications. It is crucial to take immediate action by updating or removing the package to safeguard sensitive information. Utilizing tools like Vulert can help monitor for such vulnerabilities in real-time.
See every vulnerability recorded for blank-lib →
FAQ
blank-lib is a Python package available on PyPI that has been found to contain malicious code, specifically designed to steal sensitive information.
You can check if your application is affected by using Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to use the Vulert playground without signup.
If you are using versions 0.0.8, 0.0.9, or 0.1.0 of blank-lib, you should immediately update to a patched version or remove the package from your project.
Using the blank-lib package can lead to the exfiltration of sensitive user credentials and other personal information, posing a significant security risk.
To prevent future vulnerabilities, regularly monitor your dependencies using tools like Vulert and keep your packages updated to the latest secure versions.
