Malicious code in tphackedcraftnvidia (PyPI)
Summary
MAL-2023-7091: Malicious code in tphackedcraftnvidia (PyPI). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
tphackedcraftnvidia is a package available on PyPI. It is used for crafting and hacking in the Nvidia gaming environment. The package provides various tools and utilities for modifying and enhancing the gaming experience. However, this specific version of tphackedcraftnvidia has been found to contain malicious code.
Vulnerability Detail
The malicious code in tphackedcraftnvidia was introduced in version 0.0.1. It is a result of the EsqueleSquad group publishing nearly 6000 malicious PyPi and NPM packages. The code executes spyware and information-stealing malware. The package may pose a significant risk to users' privacy and security, as it can collect sensitive information and transmit it to unauthorized entities.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall tphackedcraftnvidiaIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. However, it is essential to follow the recommended steps for fixing the issue and ensuring the security of your project.
Conclusion
The malicious code in tphackedcraftnvidia poses a significant risk to the privacy and security of users' systems. It is crucial to remove the affected version and use a trusted and secure alternative. Regularly reviewing and updating project dependencies is essential to avoid using compromised packages. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for tphackedcraftnvidia →
FAQ
You can check your project's dependencies and look for the version 0.0.1 of tphackedcraftnvidia. If it is present, your project is using the affected version.
The malicious version of tphackedcraftnvidia can execute spyware and information-stealing malware, compromising the privacy and security of your system. It may collect sensitive information and transmit it to unauthorized entities.
Yes, the EsqueleSquad group has published nearly 6000 malicious PyPi and NPM packages. It is recommended to review and update all your project dependencies to ensure they are not compromised.
It is good practice to regularly review and update your project dependencies. This helps to ensure that you are using the latest and secure versions of the packages and avoid any potential vulnerabilities.
For more information about this vulnerability and its impact, you can contact supplychainsecurity@checkmarx.com or visit https://bit.ly/checkmarx-malicious-packages.
