Malicious code in tppygetrandom (PyPI)
Summary
MAL-2023-7457: Malicious code in tppygetrandom (PyPI). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
tppygetrandom is a package available on PyPI that provides functionality for generating random numbers. It is commonly used in Python projects for various purposes. However, this package has been found to contain malicious code, which can lead to the execution of spyware and information-stealing malware.
Vulnerability Detail
The vulnerability in tppygetrandom arises from the inclusion of malicious code in the package. This code can be triggered during the execution of the package, allowing attackers to gain unauthorized access to sensitive information or perform malicious activities on the affected system. The malicious code has been identified and reported by the Checkmarx security group. It is crucial to address this vulnerability promptly to prevent any potential harm to systems using tppygetrandom.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall tppygetrandomIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The presence of malicious code in tppygetrandom poses a significant security risk to Python projects using this package. It is crucial to take immediate action to remove the affected version and replace it with a trusted version. Regularly updating and monitoring your project's dependencies can help mitigate the risk of using compromised packages. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for tppygetrandom →
FAQ
You can check your project's dependencies and look for the affected version of tppygetrandom. If it is present, it is recommended to remove it and replace it with a trusted version.
Using the malicious version of tppygetrandom can lead to the execution of spyware and information-stealing malware. This can result in unauthorized access to sensitive information, compromise of user data, and potential harm to the affected system.
At the moment, there is no specific workaround available for this vulnerability. The best course of action is to remove the affected version of tppygetrandom and replace it with a trusted version.
To ensure the security of your Python project's dependencies, it is recommended to regularly update them to the latest versions. Additionally, you can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software.
For more information about this vulnerability and its impact, you can refer to the Checkmarx security group's report and the associated GitHub repository for malicious packages.
