Malicious code in tpguiadcraft (pypi)
Summary
MAL-2023-7072: Malicious code in tpguiadcraft (PyPI). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
tpguiadcraft is a package available on PyPI that is used for [provide brief description of the package's functionality and key attributes]. It is vulnerable to a malicious code injection that was discovered by Checkmarx. This vulnerability allows attackers to execute spyware and information-stealing malware on systems where the package is installed.
Vulnerability Detail
The vulnerability in tpguiadcraft originates from a malicious PyPi package published by the EsqueleSquad group. The package contains code that can download and execute spyware and information-stealing malware on the affected system. This can lead to unauthorized access to sensitive information, compromise of user privacy, and potential damage to the system. The malicious code is introduced in version 0 of the package.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall tpguiadcraftIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is crucial to update to a secure version of tpguiadcraft as soon as possible.
Conclusion
The tpguiadcraft package on PyPI is vulnerable to a malicious code injection that can lead to the execution of spyware and information-stealing malware. It is crucial to update to a secure version of the package and regularly check for and remove any potentially malicious packages from your system. For further support and assistance with vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for tpguiadcraft →
FAQ
You can use the Vulert Playground at [provide Vulert Playground URL] to check if your system is affected by this vulnerability. Simply enter your application's Pipfile.lock and Vulert will analyze it for any open-source vulnerabilities, including this one.
Yes, updating to a secure version of tpguiadcraft will fix the vulnerability and allow you to continue using the package without the risk of executing malicious code.
Yes, the EsqueleSquad group has published nearly 6000 malicious PyPi and NPM packages. It is important to regularly check for and remove any potentially malicious packages from your system.
The potential consequences of this vulnerability include unauthorized access to sensitive information, compromise of user privacy, and potential damage to the affected system.
If you discover other malicious packages or vulnerabilities, you can report them to Checkmarx at [provide Checkmarx contact information]. They specialize in supply chain security and can assist in addressing and mitigating such issues.
