Malicious code in tpgrandkillhydra (PyPI)
Summary
MAL-2023-7062: Malicious code in tpgrandkillhydra (PyPI). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
tpgrandkillhydra is a package available on PyPI that is used for [provide brief description of the package's functionality and key attributes]. It is vulnerable to a malicious code injection that was discovered by the Checkmarx team. This vulnerability allows attackers to execute spyware and information-stealing malware.
Vulnerability Detail
The malicious code injection in tpgrandkillhydra originated from a group called EsqueleSquad. They published nearly 6000 malicious PyPi and NPM packages, including tpgrandkillhydra, which execute spyware and information-stealing malware. The specific details of the vulnerability can be found in the Checkmarx report with SHA256 hash e16c4be5742709d0e4da7ffbb48d92ea65929775d598c53124aabf8bd5f6bede. This vulnerability poses a significant risk to systems that have installed tpgrandkillhydra, as it can lead to unauthorized access and data exfiltration.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall tpgrandkillhydraIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The tpgrandkillhydra package on PyPI has been found to contain malicious code that can execute spyware and information-stealing malware. It is recommended to remove this package from your system to mitigate the risk of unauthorized access and data exfiltration. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for tpgrandkillhydra →
FAQ
tpgrandkillhydra is a package available on PyPI that [provide brief description of the package's functionality and key attributes].
The malicious code injection in tpgrandkillhydra was performed by a group called EsqueleSquad, who published nearly 6000 malicious PyPi and NPM packages.
This vulnerability allows attackers to execute spyware and information-stealing malware, which can lead to unauthorized access and data exfiltration.
You can use the Vulert playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply provide your Pipfile.lock and it will alert you in real-time for open-source vulnerabilities.
Yes, the recommended fix is to remove the tpgrandkillhydra package from your system by running 'pip uninstall tpgrandkillhydra'.
