Malicious code in tprandomosint (PyPI)
Summary
MAL-2023-7524: Malicious code in tprandomosint (PyPI). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
tprandomosint is a Python package available on PyPI. It is used for generating random data for testing and development purposes. The package provides functions to generate random names, addresses, phone numbers, and other types of data. However, this package has been found to contain malicious code.
Vulnerability Detail
The tprandomosint package has been compromised by the EsqueleSquad group, who published nearly 6000 malicious PyPi and NPM packages. These packages execute spyware and information-stealing malware. The specific vulnerability in tprandomosint allows the execution of malicious code when the package is installed and used in a Python project. This can lead to unauthorized access to sensitive information, data leakage, and potential damage to the affected system.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall tprandomosintIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround for this vulnerability. The best course of action is to remove the tprandomosint package and replace it with a trusted alternative.
Conclusion
The tprandomosint package on PyPI has been found to contain malicious code. It is recommended to remove this package from your Python project and replace it with a trusted alternative. Regularly reviewing and updating the packages used in your project is crucial to prevent similar vulnerabilities. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for tprandomosint →
FAQ
You can use the Vulert playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Simply provide your Pipfile.lock file, and Vulert will analyze it for any open-source vulnerabilities, including the malicious code in tprandomosint.
The potential consequences of this vulnerability include unauthorized access to sensitive information, data leakage, and potential damage to the affected system. The malicious code in tprandomosint can execute spyware and information-stealing malware.
Yes, you can continue using other packages from PyPI. However, it is crucial to regularly review and update the packages used in your project to ensure they are from trusted sources.
There is no fix available for tprandomosint as the package itself has been compromised. The best course of action is to remove the package from your project and replace it with a trusted alternative.
To prevent similar vulnerabilities in the future, it is important to regularly update and review the packages used in your project. Use tools like Vulert to monitor and alert for open-source vulnerabilities in your software.
