Malicious code in selfvisavmgame (PyPI)
Summary
MAL-2023-6788: Malicious code in selfvisavmgame (PyPI). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The selfvisavmgame package is an open-source Python package available on PyPI. It is designed to provide functionality for a virtual machine game. The package allows users to create and manage virtual machines within a game environment. It is widely used by developers and gamers alike.
Vulnerability Detail
A malicious code injection vulnerability has been discovered in the selfvisavmgame package. The vulnerability originates from a malicious PyPi package published by the EsqueleSquad group. The package contains spyware and information-stealing malware. When the selfvisavmgame package is installed, it executes the malicious code, compromising the security and privacy of the system. This vulnerability poses a significant risk to users who have installed the affected package.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall selfvisavmgameIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to remove the selfvisavmgame package and take appropriate security measures to protect the system.
Conclusion
The malicious code injection vulnerability in the selfvisavmgame package poses a significant risk to users. It is crucial to remove the package from the system and take appropriate security measures to protect against the associated malware. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for selfvisavmgame →
FAQ
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply enter your Pipfile.lock file, and Vulert will analyze it in real-time and provide information on any open-source vulnerabilities, including this one.
No, there is no patch available for the selfvisavmgame package. The best course of action is to remove the package from the system and take appropriate security measures.
It is highly recommended not to use the selfvisavmgame package due to the presence of malicious code. Even with security precautions, the risk of compromise and data theft is significant.
Yes, there are several alternative packages available for virtual machine game functionality. It is recommended to research and choose a package from a trusted source to ensure the security and integrity of your system.
You can report this vulnerability to the package maintainers by contacting them through their official channels. In the case of the selfvisavmgame package, you can reach out to the PyPI support team or the package author directly.
