Malicious code in tpstrmaskpy (PyPI)
Summary
MAL-2023-7623: Malicious code in tpstrmaskpy (PyPI). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
tpstrmaskpy is a Python package available on PyPI. It is used for masking sensitive information in strings. The package provides functions to mask credit card numbers, social security numbers, and other sensitive data. Unfortunately, a vulnerability has been discovered in tpstrmaskpy that allows the execution of malicious code.
Vulnerability Detail
The vulnerability in tpstrmaskpy is a result of a malicious package published on PyPI by the EsqueleSquad group. This package contains spyware and information-stealing malware. When a user installs tpstrmaskpy, the malicious code is executed, compromising the user's system and potentially exposing sensitive information. The malicious package has a SHA256 hash of c76b5c6e10aed8d578a71a6927f8306eafb34dcc0eae86b65b611305ec3c1f0b.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall tpstrmaskpyIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround for this vulnerability. However, to protect your system, it is advised to use a reliable security solution that can detect and block malicious code execution.
Conclusion
The tpstrmaskpy package on PyPI has been found to contain malicious code that can compromise the security of your system. It is crucial to remove tpstrmaskpy and any dependencies that rely on it from your project. Regularly updating and monitoring your dependencies can help mitigate the risk of installing malicious packages. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for tpstrmaskpy →
FAQ
You can use the Vulert Playground at Vulert Scanner to check if your application is affected by this vulnerability. Simply provide your Pipfile.lock, and Vulert will analyze it for any open-source vulnerabilities, including this one.
No, updating tpstrmaskpy will not resolve this vulnerability. The malicious package is separate from the legitimate tpstrmaskpy package, and updating will not remove the malicious code.
Yes, there are several alternative packages available on PyPI that provide similar functionality to tpstrmaskpy. It is recommended to choose a package with a good reputation and a large user base to minimize the risk of installing malicious code.
The malicious package has been identified and reported to PyPI. However, it is essential to remain vigilant and verify the integrity of packages before installing them.
If you have already installed tpstrmaskpy, it is recommended to remove it from your project immediately. Additionally, scan your system for any signs of compromise and consider taking necessary actions to secure your data.
