Malicious code in tppyproof (PyPI)
Summary
MAL-2023-7474: Malicious code in tppyproof (PyPI). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
tppyproof is a package available on PyPI that is used for [provide brief description of the package's functionality and key attributes]. It is vulnerable to a malicious code injection attack that was discovered by Checkmarx. This attack involves the inclusion of spyware and information-stealing malware in the package.
Vulnerability Detail
The malicious code injection in tppyproof poses a significant security risk to users who install and use this package. The attack was carried out by the EsqueleSquad group, who published nearly 6000 malicious PyPi and NPM packages. The injected code can execute spyware and steal sensitive information from the user's system. The specific details of the attack can be found in the Checkmarx report with SHA256 hash dd62179bc50e6e23797dc965ed8c6d69eae7c2f01791a48e7eca892b8f69b4ec.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall tppyproofIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to remove the affected package and replace it with a secure alternative.
Conclusion
The malicious code injection in tppyproof is a severe security vulnerability that can lead to unauthorized access and data theft. It is crucial to remove the affected package and replace it with a secure alternative. Regularly updating and patching all installed packages is also essential to ensure the overall security of your system. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for tppyproof →
FAQ
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability. Simply provide your Pipfile.lock file, and Vulert will analyze it for any open-source vulnerabilities, including this one.
The malicious code injected in tppyproof can execute spyware and steal sensitive information from the user's system. This can lead to unauthorized access to personal data, financial loss, and other security breaches.
Yes, the recommended fix is to remove the tppyproof package from your system and replace it with a trusted and secure alternative. Regularly updating and patching all installed packages is also crucial to ensure the latest security fixes are applied.
This vulnerability was discovered by Checkmarx, a security research group. They identified the malicious code injection in tppyproof and reported it to the community.
You can find more information about this vulnerability in the Checkmarx report with SHA256 hash dd62179bc50e6e23797dc965ed8c6d69eae7c2f01791a48e7eca892b8f69b4ec.
