Malicious code in tphydratoolsplit (PyPI)
Summary
MAL-2023-7133: Malicious code in tphydratoolsplit (PyPI). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The tphydratoolsplit package is an open-source Python package available on PyPI. It provides functionality related to splitting and processing data. The package is commonly used in data processing and analysis tasks. However, it has been discovered that a malicious code injection has occurred in the package.
Vulnerability Detail
The tphydratoolsplit package has been found to contain malicious code injected by the EsqueleSquad group. This code executes spyware and information-stealing malware. The malicious code can potentially compromise the security and privacy of systems using the package. The origin of the malicious code injection is attributed to the checkmarx source. The package version affected by this vulnerability is 0 or any version introduced before it.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall tphydratoolsplitIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. However, as a general security practice, it is recommended to regularly update all packages and dependencies to their latest versions from trusted sources.
Conclusion
The tphydratoolsplit package has been found to contain malicious code injected by the EsqueleSquad group. This code executes spyware and information-stealing malware. To mitigate the vulnerability, it is crucial to update the package to a safe version and take appropriate security measures. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for tphydratoolsplit →
FAQ
tphydratoolsplit is an open-source Python package available on PyPI. It provides functionality related to splitting and processing data.
The malicious code injection can execute spyware and information-stealing malware, potentially compromising the security and privacy of systems using the tphydratoolsplit package.
To fix this vulnerability, update the tphydratoolsplit package to a version that is not affected by the malicious code injection. Scan the system for signs of compromise and take appropriate security measures.
The latest version of tphydratoolsplit can be obtained from the official PyPI repository or other trusted sources.
If your system is affected, update the tphydratoolsplit package to a safe version, scan for compromise, and implement necessary security measures.
