Malicious Code in supervm (PyPI)
Summary
MAL-2023-6867: Malicious code in supervm (PyPI). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
supervm is a Python package available on PyPI. It is designed to provide virtual machine functionality for Python programs. The package allows users to create and manage virtual machines within their Python applications. It is widely used in various projects for sandboxing and isolation purposes.
Vulnerability Detail
A malicious code injection vulnerability has been discovered in supervm. The vulnerability originates from a malicious PyPi package published by the EsqueleSquad group. The package contains spyware and information-stealing malware. This malicious code can be executed when the supervm package is installed or updated, potentially compromising the security and privacy of the affected system. The vulnerability has been identified and reported by Checkmarx.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall supervmIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can consider using alternative virtual machine packages that are not affected by this vulnerability. It is important to choose packages from trusted sources and regularly update them to avoid potential security risks.
Conclusion
The malicious code injection vulnerability in supervm poses a significant risk to the security and privacy of affected systems. It is crucial to take immediate action to remove the affected package, scan for compromise, and strengthen the overall security posture of the system. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for supervm →
FAQ
supervm is a Python package that provides virtual machine functionality for Python programs. It allows users to create and manage virtual machines within their Python applications.
The vulnerability occurs when the supervm package is installed or updated from a malicious PyPi package published by the EsqueleSquad group. This package contains spyware and information-stealing malware.
The potential consequences of this vulnerability include unauthorized access to sensitive information, data theft, and compromise of the affected system's security and privacy.
This vulnerability was discovered and reported by Checkmarx, a security research group.
To protect your system, it is recommended to remove the affected supervm package, scan the system for signs of compromise, update security software, and conduct a thorough security audit.
