Malicious code in tppushpingpy (PyPI)
Summary
MAL-2023-7448: Malicious code in tppushpingpy (PyPI). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
tppushpingpy is a package available on PyPI that is used for [provide brief description of the package's functionality and key attributes]. It is vulnerable to a malicious code injection attack, which can lead to the execution of spyware and information-stealing malware on the system.
Vulnerability Detail
The vulnerability in tppushpingpy originates from a malicious package published on PyPI by the EsqueleSquad group. This package contains code that can compromise the security of the system by executing spyware and stealing sensitive information. The package can be identified by its SHA256 hash: f65b052a557e754973e685b85cd2af935cd42de679294a9ce21191e4e41e917b. The malicious code can be downloaded from the following URLs: [https://dl.dropbox.com/s/tpykidpdjz99202/esquele.exe, https://cdn.discordapp.com/attachments/1090710876639744062/1102575056925761587/bypass2.ps1].
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall tppushpingpyIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The best course of action is to follow the steps mentioned in the 'how_to_fix' section.
Conclusion
The tppushpingpy package on PyPI has been found to contain malicious code that can compromise the security of the system. It is important to remove this package and any dependencies from the system to mitigate the risk of spyware and information theft. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for tppushpingpy →
FAQ
You can use the Vulert Playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Simply provide the Pipfile.lock file of your application and Vulert will analyze it for any open-source vulnerabilities, including this one.
No, updating tppushpingpy to the latest version will not fix this vulnerability as it is caused by a malicious package published on PyPI. It is recommended to remove the package from the system.
There are no known exploits specifically targeting this vulnerability at the moment. However, it is important to address the vulnerability promptly to prevent any potential security breaches.
Yes, there are alternative packages available on PyPI that provide similar functionality to tppushpingpy. It is recommended to choose a package from a trusted source and ensure it has a good track record of security.
You can report this vulnerability to the PyPI maintainers by contacting their support team or submitting a bug report on their official website.
