Malicious Code in tpcontrolkillrandom (PyPI)
Summary
MAL-2023-6946: Malicious code in tpcontrolkillrandom (PyPI). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The tpcontrolkillrandom package is an open-source Python package available on PyPI. It is used for controlling and killing random processes in a system. The package provides functionality to randomly select and terminate running processes. However, a vulnerability has been discovered in this package that allows the execution of malicious code.
Vulnerability Detail
The vulnerability in tpcontrolkillrandom is due to the inclusion of malicious code in the package. The code is injected by the EsqueleSquad group, who published nearly 6000 malicious PyPi and NPM packages. These packages contain spyware and information-stealing malware. The specific impact of this vulnerability may vary depending on the payload of the injected code, but it can potentially lead to unauthorized access, data theft, and other malicious activities.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall tpcontrolkillrandomIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround provided for this vulnerability. The best course of action is to follow the recommended steps for fixing the vulnerability.
Conclusion
The tpcontrolkillrandom package on PyPI has been found to contain malicious code injected by the EsqueleSquad group. This vulnerability poses a significant risk to the security and integrity of affected systems. It is crucial to take immediate action to remove and replace the vulnerable package, as well as regularly review and update all packages used in your project. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for tpcontrolkillrandom →
FAQ
You can check your project's dependencies or requirements files to see if tpcontrolkillrandom is listed. Additionally, you can use tools like Vulert (https://vulert.com) to scan your project and identify any vulnerable packages.
The potential risks of this vulnerability include unauthorized access to sensitive data, information theft, and the execution of malicious code on the affected system.
While specific exploits for this vulnerability have not been disclosed, the presence of malicious code in the tpcontrolkillrandom package increases the risk of potential exploits.
The tpcontrolkillrandom package has not been removed from PyPI at the time of this report. It is important to exercise caution and avoid using this package in your projects.
If your project is affected by this vulnerability, it is recommended to remove the tpcontrolkillrandom package and replace it with a trusted alternative. Additionally, review and update all other packages used in your project to ensure they are from trusted sources and free from known vulnerabilities.
References
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
