Malicious code in selfvmvisahacked (PyPI)
Summary
MAL-2023-6802: Malicious code in selfvmvisahacked (PyPI). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The selfvmvisahacked package is an open-source Python package available on PyPI. It is designed to provide functionality related to self-visualization of Visa data. The package allows users to interact with Visa data and generate visualizations for analysis. However, the package has been found to contain malicious code, making it a potential security risk for users.
Vulnerability Detail
The selfvmvisahacked package has been identified as part of a larger campaign by the EsqueleSquad group to distribute malicious packages on PyPI and NPM. These packages contain spyware and information-stealing malware. The specific vulnerability in selfvmvisahacked allows the execution of this malicious code, putting users' data and systems at risk. The origin of the vulnerability can be traced back to the checkmarx source, which flagged the package as malicious. The package's SHA256 hash is 98816006fef32e25b1d66fccf918a0d5ecbd41e63b5179b9b75861efe6c17d74.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall selfvmvisahackedIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is crucial to remove the package from your environment to mitigate the risk.
Conclusion
The selfvmvisahacked package on PyPI has been found to contain malicious code, posing a significant security risk to users. It is crucial to remove the package from your Python environment to mitigate the risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for selfvmvisahacked →
FAQ
selfvmvisahacked is a Python package available on PyPI that provides functionality for self-visualization of Visa data.
The vulnerability was discovered by the Checkmarx security team, who flagged the selfvmvisahacked package as part of a larger campaign distributing malicious packages.
The vulnerability allows the execution of malicious code, which can lead to the installation of spyware and information-stealing malware on affected systems.
Yes, the recommended fix is to uninstall the selfvmvisahacked package from your Python environment.
Yes, the EsqueleSquad group has published nearly 6000 malicious PyPi and NPM packages as part of this campaign.
