Malicious code in pycryptlib (PyPI)
Summary
MAL-2024-5683: Malicious code in pycryptlib (PyPI). Affects pycryptlib versions 1.0.0 – 1.1.5. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
pycryptlib is a Python package available on PyPI that provides cryptographic functionality. It is used by developers to implement encryption and decryption in their applications. However, a recent vulnerability has been discovered in pycryptlib that exposes users to potential security risks.
Vulnerability Detail
The vulnerability in pycryptlib involves the presence of malicious code within the package. This code can be exploited by attackers to gain unauthorized access, steal sensitive information, or perform other malicious activities. The malicious code was identified by ReversingLabs and has been traced back to versions 1.1.5 and 1.0.0 of pycryptlib.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall pycryptlibIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is currently no known workaround for this vulnerability. It is crucial to update to a secure version of pycryptlib as soon as possible.
Conclusion
The presence of malicious code in pycryptlib poses a significant security risk to users. It is crucial for developers to update to a secure version of the package and ensure that their applications are not using the affected versions. By taking these steps, the vulnerability can be mitigated and the security of the applications can be enhanced.
See every vulnerability recorded for pycryptlib →
FAQ
pycryptlib is a Python package that provides cryptographic functionality, allowing developers to implement encryption and decryption in their applications.
The vulnerability exposes users to potential security risks, as attackers can exploit the malicious code within pycryptlib to gain unauthorized access or steal sensitive information.
Versions 1.1.5 and 1.0.0 of pycryptlib have been identified as containing the malicious code.
The vulnerability was discovered by ReversingLabs, a cybersecurity company.
Developers should update pycryptlib to a secure version that does not contain the malicious code. They should also ensure that their applications are using the updated version of pycryptlib.
References
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
