Malicious code in pyghoster (PyPI)
Summary
MAL-2023-8571: Malicious code in pyghoster (PyPI). Affects pyghoster versions 1.0.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Pyghoster is a package available on PyPI that provides functionality for hosting Python applications. It allows developers to easily deploy their Python projects on a hosting platform. However, the package has been found to contain malicious code, which poses a security risk to users who install and use it.
Vulnerability Detail
The vulnerability in pyghoster originates from a malicious package campaign targeting developers. The payload is hidden using steganography, making it difficult to detect. Once installed, the malicious code can exfiltrate host information, potentially compromising the security and privacy of the affected system. The campaign has been identified and reported by Checkmarx.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall pyghosterIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround provided for this vulnerability. The best course of action is to follow the steps mentioned in the 'how_to_fix' section and ensure the removal of the pyghoster package from your system.
Conclusion
The presence of malicious code in pyghoster poses a significant security risk to users. It is crucial to take immediate action by removing the package, scanning for compromise, and securing your system. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for pyghoster →
FAQ
Pyghoster is a Python package available on PyPI that allows developers to host their Python applications on a hosting platform.
The vulnerability was discovered by Checkmarx during their analysis of malicious packages. They identified a campaign targeting developers and reported the findings.
The vulnerability in pyghoster can lead to the exfiltration of host information, potentially compromising the security and privacy of the affected system.
To protect your system, it is recommended to remove the pyghoster package, scan your system for signs of compromise, and regularly update and patch your software.
Yes, there are alternative packages available on PyPI that provide similar functionality to pyghoster. It is recommended to research and choose a package with a good reputation and regular updates.
