Malicious Code Detected in Rendom Package: Remote Control Threat
Summary
MAL-2025-192323: Malicious code in rendom (PyPI). Affects rendom versions 0.2. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Rendom package, available on PyPI, is designed to provide functionalities related to random number generation. However, it has been identified as a malicious package that contains a Telegram bot capable of performing remote control operations on a user's computer. This poses a significant risk to users who may inadvertently install it, mistaking it for the legitimate 'random' module.
Vulnerability Detail
The vulnerability stems from the Rendom package being a malicious implementation that acts as a Remote Access Trojan (RAT). It downloads and executes a remote malicious script, allowing attackers to gain unauthorized control over the victim's computer. This poses severe risks, including data theft, unauthorized access to sensitive information, and potential system compromise. The package's name is also a form of typosquatting, misleading users into thinking it is a legitimate package.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall rendomIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, avoid using the Rendom package altogether. Instead, utilize the standard 'random' module that comes with Python. Here’s how to use it:
import random
Generate a random number between 1 and 10
random_number = random.randint(1, 10) print(random_number)
Conclusion
The Rendom package poses a significant security threat due to its malicious intent and functionality as a remote access tool. Users are strongly advised to uninstall this package and remain vigilant when installing third-party packages. Utilizing tools like Vulert can help in monitoring and managing vulnerabilities effectively.
See every vulnerability recorded for rendom →
FAQ
Rendom is a malicious package on PyPI that masquerades as a random number generation tool but contains harmful code for remote control.
You can check your installed packages by running 'pip list' in your terminal. Look for 'rendom' in the list.
Uninstall the Rendom package immediately using the command 'pip uninstall rendom' to prevent any potential harm.
Always verify the authenticity of packages before installation. Use trusted sources and consider using tools like Vulert to monitor vulnerabilities.
Vulert monitors and alerts for open-source vulnerabilities in your software using just the Pipfile.lock. You can check for vulnerabilities in your application without needing to sign up.
