Malicious code in selfultravirtual (PyPI)
Summary
MAL-2023-6718: Malicious code in selfultravirtual (PyPI). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
selfultravirtual is a package available on PyPI that provides functionality for virtualization. It allows users to create and manage virtual environments for their Python projects. The package is widely used by developers to isolate project dependencies and ensure reproducibility. However, a recent security issue has been identified in selfultravirtual, which involves the presence of malicious code.
Vulnerability Detail
The vulnerability in selfultravirtual is a result of the package being compromised by the EsqueleSquad group. They published nearly 6000 malicious PyPi and NPM packages, including selfultravirtual, which execute spyware and information-stealing malware. This malicious code can potentially compromise the security and privacy of users' systems. The compromised version of selfultravirtual has a SHA256 hash of 9bb6428d58b347857d86baf10fa08c183efab06523233983b6d42697a30e726e.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall selfultravirtualIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is crucial to remove the compromised version of selfultravirtual and ensure that you are using a secure and trusted version of the package.
Conclusion
In conclusion, the selfultravirtual package on PyPI has been compromised by the EsqueleSquad group, resulting in the presence of malicious code. It is crucial to remove the compromised version of selfultravirtual and ensure that you are using a secure and trusted version of the package. Regularly updating your packages and staying vigilant about potential security issues is essential for maintaining the integrity of your Python projects. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for selfultravirtual →
FAQ
You can check the SHA256 hash of your selfultravirtual package and compare it with the compromised version's hash (9bb6428d58b347857d86baf10fa08c183efab06523233983b6d42697a30e726e). If they match, your version is compromised.
The compromised version of selfultravirtual can execute spyware and information-stealing malware, which can lead to unauthorized access to sensitive data, privacy breaches, and potential system compromise.
Yes, the fix for this vulnerability is to uninstall the compromised version of selfultravirtual and ensure that you are using a secure and trusted version of the package.
Yes, if you have not installed the compromised version of selfultravirtual, you can continue using the package without any security concerns. However, it is always recommended to regularly update your packages to ensure you are using the latest secure versions.
If you have further information or want to report this vulnerability, you can contact Checkmarx at supplychainsecurity@checkmarx.com or visit their website at https://bit.ly/checkmarx-malicious-packages.
References
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
