Malicious code in tppyreplacestr (PyPI)
Summary
MAL-2023-7477: Malicious code in tppyreplacestr (PyPI). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The tppyreplacestr package is an open-source Python package available on PyPI. It provides functionality for replacing substrings in text. The package is commonly used in various Python projects and applications.
Vulnerability Detail
The tppyreplacestr package has been found to contain malicious code. This vulnerability was discovered by the Checkmarx security team. The malicious code was introduced in version 0 of the package. The code is designed to execute spyware and information-stealing malware. The malicious code can be found in the following URLs: https://dl.dropbox.com/s/tpykidpdjz99202/esquele.exe and https://cdn.discordapp.com/attachments/1090710876639744062/1102575056925761587/bypass2.ps1. This vulnerability poses a significant risk to any project or application that uses the tppyreplacestr package, as it can lead to unauthorized access and data theft.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall tppyreplacestrIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to address the issue by removing or updating the affected package as mentioned in the 'how_to_fix' section.
Conclusion
The tppyreplacestr package has been found to contain malicious code that can lead to unauthorized access and data theft. It is crucial to take immediate action to remove or update the affected package and scan the system for any signs of compromise. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for tppyreplacestr →
FAQ
tppyreplacestr is a Python package available on PyPI that provides functionality for replacing substrings in text.
The malicious code in tppyreplacestr was discovered by the Checkmarx security team during their routine security analysis.
This vulnerability can lead to unauthorized access and data theft, as the malicious code is designed to execute spyware and information-stealing malware.
To fix this vulnerability, it is recommended to immediately remove or update the tppyreplacestr package to a version that is not affected by the malicious code. Additionally, it is crucial to scan the system for any signs of compromise and take appropriate actions to mitigate the impact of the malware.
There is no known workaround for this vulnerability. It is essential to address the issue by removing or updating the affected package as mentioned in the 'how_to_fix' section.
