Malicious code in selfguipullsplit (PyPI)
Summary
MAL-2023-6134: Malicious code in selfguipullsplit (PyPI). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The selfguipullsplit package is an open-source Python package available on PyPI. It is designed to provide functionality for self-gui pull splitting. This package allows users to split pull requests into smaller, more manageable chunks. It is commonly used in software development projects that utilize pull requests for code review and collaboration. Unfortunately, this package has been found to contain malicious code, which poses a significant security risk to users.
Vulnerability Detail
The selfguipullsplit package has been identified as containing malicious code. The code was introduced in version 0 of the package and has been distributed through PyPI. The malicious code is designed to execute spyware and information-stealing malware on the systems of users who install the package. This can lead to unauthorized access to sensitive information, compromise of user credentials, and potential damage to the affected systems. The origin of this vulnerability is attributed to the EsqueleSquad group, who published nearly 6000 malicious PyPi and NPM packages.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall selfguipullsplitIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. The best course of action is to remove the selfguipullsplit package and follow the recommended steps for remediation.
Conclusion
The selfguipullsplit package on PyPI has been found to contain malicious code, posing a significant security risk to users. It is crucial to remove the package from any affected systems, perform a security audit, and update software dependencies. Immediate action is necessary to mitigate the potential consequences of this vulnerability. For further support and guidance, please contact DevNack.com.
See every vulnerability recorded for selfguipullsplit →
FAQ
You can use the Vulert Playground at Vulert Scanner to check if your application is affected by this vulnerability. Simply enter your Pipfile.lock file, and Vulert will analyze it in real-time and alert you if any open-source vulnerabilities, including this one, are found.
The malicious code in the selfguipullsplit package can lead to unauthorized access to sensitive information, compromise of user credentials, and potential damage to the affected systems. It is crucial to take immediate action to mitigate these risks.
Yes, the recommended fix is to remove the selfguipullsplit package from any affected systems and perform a thorough security audit to identify any potential compromise. It is also important to update all software dependencies and ensure they are from trusted sources.
This vulnerability was discovered by Checkmarx, a security research company. They identified the malicious code in the selfguipullsplit package and reported it to the appropriate channels for remediation.
For further support on vulnerability remediation, you can contact info@devnack.com. They can provide guidance and assistance in addressing this vulnerability and ensuring the security of your systems.
References
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
