Malicious code in tploadcraftint (PyPI)
Summary
MAL-2023-7221: Malicious code in tploadcraftint (PyPI). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
tploadcraftint is a package available on PyPI that is used for [provide brief description of the package's functionality and key attributes]. It is vulnerable to a malicious code injection attack, as detailed below.
Vulnerability Detail
The tploadcraftint package has been found to contain malicious code, as part of a larger campaign by the EsqueleSquad group. This group has published nearly 6000 malicious PyPi and NPM packages, which execute spyware and information-stealing malware. The specific malicious code in tploadcraftint can [describe the technical aspects and potential ramifications of the vulnerability].
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall tploadcraftintIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is currently no known workaround for this vulnerability. It is crucial to update or remove the tploadcraftint package to mitigate the risk.
Conclusion
The tploadcraftint package on PyPI has been found to contain malicious code, potentially leading to the execution of spyware and information-stealing malware. It is crucial to update or remove this package to mitigate the risk. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for tploadcraftint →
FAQ
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability. Simply provide your Pipfile.lock file, and Vulert will analyze it in real-time.
At the time of this report, there is no official patch available for tploadcraftint. It is recommended to remove or update the package to a non-malicious version.
The malicious code in tploadcraftint can lead to the execution of spyware and information-stealing malware, compromising the security and privacy of the affected system.
This vulnerability was discovered by Checkmarx, a security company specializing in supply chain security. They can be contacted at supplychainsecurity@checkmarx.com for further information.
As part of the same campaign, the EsqueleSquad group has published numerous other malicious PyPi and NPM packages. It is recommended to review your dependencies and ensure they are from trusted sources.
