Malicious code in aws-consoler2 (PyPI)
Summary
MAL-2023-8358: Malicious code in aws-consoler2 (PyPI). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The aws-consoler2 package is an open-source Python package available on PyPI. It is designed to provide a console interface for managing and interacting with AWS resources. The package allows users to perform various operations on their AWS infrastructure, such as creating and managing EC2 instances, managing S3 buckets, and configuring IAM roles. Unfortunately, this package has been found to contain malicious code that targets users of Alibaba, AWS, and Telegram.
Vulnerability Detail
The malicious code was strategically hidden within specific functions of the aws-consoler2 package. It would only trigger when these functions were called, making it difficult to detect. The code does not automatically run on installation or import, further evading detection. The attack aims to exploit users of Alibaba, AWS, and Telegram by compromising their systems through the execution of the malicious code. The exact nature and ramifications of the code are not specified in the provided information.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall aws-consoler2If it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned in the provided information. However, as a general precaution, users should regularly update their packages and dependencies from trusted sources, and exercise caution when installing packages from unfamiliar or unverified publishers.
Conclusion
In conclusion, the aws-consoler2 package available on PyPI has been found to contain malicious code targeting users of Alibaba, AWS, and Telegram. It is crucial to uninstall the package, review other installed packages, and implement security measures to mitigate the risk. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for aws-consoler2 →
FAQ
aws-consoler2 is a Python package available on PyPI that provides a console interface for managing AWS resources.
The malicious code was strategically hidden within specific functions of the aws-consoler2 package, only triggering when these functions were called.
The attack targets users of Alibaba, AWS, and Telegram.
To protect yourself, uninstall the aws-consoler2 package, review and verify the integrity of other packages installed from PyPI, and consider implementing additional security measures.
The provided information does not specify the exact impacts of the malicious code.
