Malicious code in tprandomedsuper (PyPI)
Summary
MAL-2023-7521: Malicious code in tprandomedsuper (PyPI). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The tprandomedsuper package is an open-source Python package available on the Python Package Index (PyPI). It provides functionality related to random number generation. The package is vulnerable to a malicious code injection.
Vulnerability Detail
The tprandomedsuper package has been found to contain malicious code. This code was introduced in version 0 and is present in the package's source code. The malicious code can execute spyware and information-stealing malware. The origin of this vulnerability is the EsqueleSquad group, which published nearly 6000 malicious PyPi and NPM packages. The impact of this vulnerability can be severe, as it can compromise the security and privacy of systems using the tprandomedsuper package.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall tprandomedsuperIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround for this vulnerability. The best course of action is to remove the tprandomedsuper package and replace it with a trusted alternative.
Conclusion
The tprandomedsuper package has been found to contain malicious code, which can execute spyware and information-stealing malware. To ensure the security and integrity of your project, it is advised to remove the tprandomedsuper package and replace it with a trusted alternative. Regularly reviewing and updating the packages used in your project is also crucial to avoid using packages with known vulnerabilities. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for tprandomedsuper →
FAQ
You can use the Vulert Playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Simply provide your Pipfile.lock file, and Vulert will analyze it for any open-source vulnerabilities, including this one.
While specific exploits targeting this vulnerability have not been disclosed, it is important to address the issue promptly to prevent any potential security breaches or data leaks.
While PyPI is a widely used package repository, it is essential to exercise caution and verify the trustworthiness of the packages you use. Regularly reviewing package updates and checking for any reported vulnerabilities can help mitigate risks.
Preventing the publication of malicious packages is a complex challenge. However, package managers and security tools like Vulert can help identify and flag potentially malicious packages, providing an additional layer of defense.
If you come across a malicious package on PyPI, it is recommended to report it to the PyPI maintainers and provide any relevant details or evidence. This helps protect the community and prevent further distribution of the malicious package.
