Malicious code in py-toolcontrolproof (pypi)
Summary
MAL-2023-5690: Malicious code in py-toolcontrolproof (PyPI). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The py-toolcontrolproof package is an open-source Python package available on PyPI. It is designed to provide tool control and proof functionality for Python projects. This package allows developers to manage and control various tools used in their projects. However, the package has been found to contain malicious code.
Vulnerability Detail
The py-toolcontrolproof package has been identified as part of a larger group of nearly 6000 malicious PyPi and NPM packages. These packages were published by the EsqueleSquad group and contain spyware and information-stealing malware. The specific vulnerability in py-toolcontrolproof allows the execution of malicious code, potentially leading to unauthorized access, data theft, and other malicious activities.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall py-toolcontrolproofIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to remove the py-toolcontrolproof package and take necessary precautions to prevent further exposure to malicious code.
Conclusion
The py-toolcontrolproof package on PyPI has been found to contain malicious code as part of a larger group of malicious packages. It is crucial to remove this package from your Python project and take necessary precautions to prevent exposure to such vulnerabilities. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for py-toolcontrolproof →
FAQ
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability. Simply provide your Pipfile.lock file, and Vulert will analyze it to identify any open-source vulnerabilities, including the py-toolcontrolproof package.
The malicious code in the py-toolcontrolproof package can lead to unauthorized access, data theft, and other malicious activities. It is crucial to remove the package promptly to mitigate these risks.
The recommended fix is to remove the py-toolcontrolproof package from your Python project. Additionally, regularly updating and reviewing the packages used in your project is essential to ensure they are from trusted sources.
Yes, you can continue using other packages from PyPI. However, it is crucial to exercise caution and ensure that the packages you use are from trusted sources. Regularly updating and monitoring for vulnerabilities is also recommended.
To prevent similar vulnerabilities, it is important to follow best practices for package management. Only use packages from trusted sources, regularly update and review the packages used in your project, and consider using a package vulnerability monitoring tool like Vulert.
References
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
