Malicious code in tpramvisapush (PyPI)
Summary
MAL-2023-7514: Malicious code in tpramvisapush (PyPI). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The tpramvisapush package is an open-source Python package available on PyPI. It is designed to provide functionality related to Visa push notifications for a specific application. The package allows developers to integrate Visa push notification services into their applications easily. However, this package has been found to contain malicious code.
Vulnerability Detail
The tpramvisapush package has been identified as containing malicious code introduced by the Checkmarx source (SHA256: d027f53363cc54ba8a91680c4d58a463cbc5a29109c2e7634fc09f27bb0c265a). This code is part of a larger campaign by the EsqueleSquad group, which has published nearly 6000 malicious PyPi and NPM packages. The malicious code executed spyware and information-stealing malware. The specific impact of this vulnerability on the tpramvisapush package is not mentioned in the provided information.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall tpramvisapushIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. However, as mentioned in the 'how_to_fix' section, removing the tpramvisapush package and using a trusted alternative is the recommended course of action.
Conclusion
The tpramvisapush package has been found to contain malicious code introduced by the Checkmarx source. It is crucial to remove this package from your project and replace it with a trusted alternative to ensure the security of your application. Regularly reviewing and updating the packages used in your project is also essential to mitigate potential security risks. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for tpramvisapush →
FAQ
The tpramvisapush package is a Python package available on PyPI that provides functionality related to Visa push notifications for applications.
The specific impact of this vulnerability on the tpramvisapush package is not mentioned in the provided information. However, it is known that the malicious code executed spyware and information-stealing malware.
This vulnerability was discovered by Checkmarx, a security company specializing in software vulnerability detection.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. It analyzes your Pipfile.lock and alerts you in real-time for open-source vulnerabilities.
If your application is affected by this vulnerability, it is recommended to remove the tpramvisapush package and replace it with a trusted alternative. Additionally, regularly update and review the packages used in your project to avoid potential security risks.
