Malicious code in splitcc (PyPI)
Summary
MAL-2023-6803: Malicious code in splitcc (PyPI). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The splitcc package is an open-source Python package available on PyPI. It is used for splitting credit card numbers into individual digits. This package is vulnerable to a malicious code injection attack.
Vulnerability Detail
The splitcc package has been found to contain malicious code introduced by the EsqueleSquad group. This code is designed to execute spyware and steal sensitive information. The malicious code can be found in the package's source code and can be triggered when the package is installed or used in a Python project. The impact of this vulnerability can be severe, as it can lead to unauthorized access to sensitive data and compromise the security of systems using the splitcc package.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall splitccIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, you can manually inspect the source code of the splitcc package and remove any malicious code. However, this is not recommended unless you have the expertise to thoroughly analyze the code and ensure its integrity.
Conclusion
The splitcc package has been found to contain malicious code introduced by the EsqueleSquad group. This code can lead to unauthorized access to sensitive data and compromise the security of systems using the package. It is crucial to remove the splitcc package and replace it with a trusted alternative. Regularly updating and reviewing the packages used in your project is also important to mitigate the risk of known vulnerabilities. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for splitcc →
FAQ
The splitcc package is a Python package used for splitting credit card numbers into individual digits. It is commonly used in applications that handle payment processing.
The malicious code was introduced by the EsqueleSquad group, who published nearly 6000 malicious PyPi and NPM packages. The code was injected into the splitcc package's source code.
This vulnerability can lead to unauthorized access to sensitive data and compromise the security of systems using the splitcc package. The malicious code is designed to execute spyware and steal information.
You can use Vulert's playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Simply provide your Pipfile.lock file to the playground, and it will alert you in real-time if any open-source vulnerabilities, including this one, are detected.
If your application is affected by this vulnerability, it is recommended to remove the splitcc package and replace it with a trusted alternative. Additionally, consider implementing vulnerability monitoring tools like Vulert to receive real-time alerts for open-source vulnerabilities in your software.
References
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
