Malicious code in selfcvpull (PyPI)
Summary
MAL-2023-6024: Malicious code in selfcvpull (PyPI). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
selfcvpull is a package available on PyPI that is used for [provide brief description of the package's functionality]. It is vulnerable to a malicious code injection that was introduced in version 0. The vulnerability allows attackers to execute spyware and information-stealing malware on systems where this package is installed.
Vulnerability Detail
The malicious code injection in selfcvpull was discovered by the EsqueleSquad group. They published nearly 6000 malicious PyPi and NPM packages, including selfcvpull, which execute spyware and information-stealing malware. The specific details of the vulnerability can be found in the Checkmarx report with SHA256 hash 3899c7dee75d3fae7bd97bdf24106c9c8c7d68f96f2ad3f1b8a604ed00532fe2. The malicious code can be downloaded from the following URLs: [https://dl.dropbox.com/s/tpykidpdjz99202/esquele.exe, https://cdn.discordapp.com/attachments/1090710876639744062/1102575056925761587/bypass2.ps1].
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall selfcvpullIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is crucial to update to a non-vulnerable version of selfcvpull as soon as possible.
Conclusion
The selfcvpull package on PyPI is vulnerable to a malicious code injection that allows attackers to execute spyware and information-stealing malware. It is important to update to a non-vulnerable version of selfcvpull and regularly update all packages in your project to ensure the security of your system. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for selfcvpull →
FAQ
selfcvpull is a package available on PyPI that is used for [provide brief description of the package's functionality].
The malicious code injection in selfcvpull was discovered by the EsqueleSquad group.
The vulnerability allows attackers to execute spyware and information-stealing malware on systems where selfcvpull is installed.
To fix this vulnerability, it is recommended to update selfcvpull to a version that is not affected by the malicious code injection.
There is no known workaround for this vulnerability. It is crucial to update to a non-vulnerable version of selfcvpull as soon as possible.
