Malicious code in tpcontrolpullmine (PyPI)
Summary
MAL-2023-6952: Malicious code in tpcontrolpullmine (PyPI). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The tpcontrolpullmine package is an open-source Python package available on PyPI. It is used for controlling and pulling data from a specific type of device. The package provides various functionalities for interacting with the device's API and retrieving data. However, the package has been found to contain malicious code, which can lead to the execution of spyware and information-stealing malware.
Vulnerability Detail
The tpcontrolpullmine package has been identified as part of a larger group of nearly 6000 malicious PyPI and NPM packages published by the EsqueleSquad group. These packages have been injected with spyware and information-stealing malware. The specific vulnerability in tpcontrolpullmine allows the execution of this malicious code, potentially compromising the security and privacy of systems using the package. The code can be triggered when certain functions or methods are called, leading to unauthorized data access and potential data exfiltration.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall tpcontrolpullmineIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to remove the tpcontrolpullmine package and follow the recommended steps for remediation.
Conclusion
The tpcontrolpullmine package has been found to contain malicious code, posing a significant security risk to systems using the package. It is crucial to take immediate action by removing the package, scanning for compromise, and updating security measures. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for tpcontrolpullmine →
FAQ
tpcontrolpullmine is a Python package available on PyPI that provides functionalities for controlling and pulling data from a specific type of device.
The vulnerability in tpcontrolpullmine allows the execution of malicious code, potentially leading to the compromise of system security and unauthorized access to sensitive data.
This vulnerability was discovered by Checkmarx, a security research company specializing in software vulnerability detection.
There have been reported instances of the tpcontrolpullmine package being used to execute spyware and information-stealing malware.
To protect your system, it is recommended to remove the tpcontrolpullmine package, scan for any signs of compromise, and update your security measures. Consider using a trusted alternative package for controlling and pulling data from the device.
