Malicious code in tppywcraftcontrol (PyPI)
Summary
MAL-2023-7480: Malicious code in tppywcraftcontrol (PyPI). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The tppywcraftcontrol package is an open-source Python package available on PyPI. It is designed to provide control and management functionalities for craft-related activities. The package allows users to interact with various craft tools and devices. However, the package has been found to contain malicious code.
Vulnerability Detail
The tppywcraftcontrol package has been identified as one of the nearly 6000 malicious PyPi packages published by the EsqueleSquad group. These packages execute spyware and information-stealing malware. The specific vulnerability in tppywcraftcontrol allows unauthorized access to user information and potentially compromises the security of the systems using the package.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall tppywcraftcontrolIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround available for this vulnerability. It is essential to remove the malicious package and replace it with a secure alternative.
Conclusion
The tppywcraftcontrol package has been identified as a malicious PyPi package containing spyware and information-stealing malware. It is crucial to remove this package from your project and replace it with a trusted alternative to ensure the security of your systems and protect user information. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for tppywcraftcontrol →
FAQ
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability. Simply provide your Pipfile.lock file, and Vulert will analyze it for any open-source vulnerabilities, including this one.
This vulnerability can lead to unauthorized access to user information and compromise the security of systems using the tppywcraftcontrol package. It may result in data breaches, information theft, and potential misuse of sensitive data.
Yes, the recommended fix is to remove the tppywcraftcontrol package from your project and replace it with a trusted alternative. Regularly updating and reviewing the packages used in your project is also crucial to mitigate potential security risks.
No, it is not advisable to use the tppywcraftcontrol package even with precautions. The package contains malicious code that can compromise the security of your systems and lead to unauthorized access and data breaches.
For more information about this vulnerability and its impact, you can contact supplychainsecurity@checkmarx.com or visit https://bit.ly/checkmarx-malicious-packages.
