Malicious code in tpkillrandpull (PyPI)
Summary
MAL-2023-7195: Malicious code in tpkillrandpull (PyPI). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
tpkillrandpull is a package available on PyPI, which is the Python Package Index. It is used for a specific purpose and has certain functionalities. However, this package has been found to contain malicious code that can execute spyware and information-stealing malware.
Vulnerability Detail
The vulnerability in tpkillrandpull arises from the inclusion of malicious code within the package. This code can be triggered during the execution of the package, leading to the installation of spyware and malware on the user's system. The origin of this vulnerability is a group called EsqueleSquad, who published nearly 6000 malicious PyPi and NPM packages. The impact of this vulnerability can be severe, as it can compromise the security and privacy of the affected systems.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall tpkillrandpullIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The best course of action is to remove the tpkillrandpull package and follow the recommended steps to fix the vulnerability.
Conclusion
In conclusion, the tpkillrandpull package on PyPI has been found to contain malicious code that can execute spyware and information-stealing malware. It is crucial to remove this package from your system and take necessary steps to fix the vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for tpkillrandpull →
FAQ
tpkillrandpull is a package available on PyPI that serves a specific purpose.
The malicious code in tpkillrandpull can execute spyware and information-stealing malware, compromising the security and privacy of your system.
The malicious code in tpkillrandpull is attributed to a group called EsqueleSquad, who published numerous malicious PyPi and NPM packages.
To fix this vulnerability, remove the tpkillrandpull package from your system, update and patch your software regularly, and scan your system for signs of compromise.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Vulert uses Pipfile.lock to provide real-time vulnerability information without requiring access to the code or installation.
