Malicious code in tppyrandomed (PyPI)
Summary
MAL-2023-7476: Malicious code in tppyrandomed (PyPI). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The tppyrandomed package is an open-source Python package available on PyPI. It is used for random number generation in various applications. The package is vulnerable to a malicious code injection.
Vulnerability Detail
The tppyrandomed package has been found to contain malicious code injected by the EsqueleSquad group. This group has published nearly 6000 malicious PyPi and NPM packages that execute spyware and information-stealing malware. The specific vulnerability in tppyrandomed allows the execution of unauthorized code, potentially leading to data theft, system compromise, or other malicious activities.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall tppyrandomedIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to take immediate action by removing the affected package and following the recommended fix.
Conclusion
The tppyrandomed package on PyPI has been found to contain malicious code injected by the EsqueleSquad group. This vulnerability can lead to unauthorized code execution and potential data theft. It is crucial to remove the affected package and replace it with a trusted alternative. Regularly reviewing and updating project dependencies is essential for maintaining a secure software ecosystem. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for tppyrandomed →
FAQ
You can check your project's dependencies or requirements file to see if tppyrandomed is listed. Additionally, you can use tools like Vulert (https://vulert.com) to scan your project for vulnerabilities.
The malicious code in tppyrandomed can lead to unauthorized code execution, data theft, and system compromise. It is crucial to address this vulnerability promptly to mitigate these risks.
There have been reports of the EsqueleSquad group injecting malicious code into various packages, including tppyrandomed. While specific instances of exploitation may not be publicly documented, it is essential to treat this vulnerability seriously and take appropriate action.
While PyPI is a widely used and trusted package repository, it is crucial to exercise caution and review the packages you include in your project. Regularly updating and reviewing dependencies can help mitigate potential security risks.
If you come across suspicious packages or vulnerabilities, you can report them to the respective package maintainers or security organizations like Vulert (https://vulert.com). They can investigate and take appropriate action.
References
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
