Malicious Code in tpstrmcint (PyPI)
Summary
MAL-2023-7624: Malicious code in tpstrmcint (PyPI). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
tpstrmcint is a package available on PyPI that is used for [provide functionality]. It is commonly used in [mention specific use cases or industries]. The package is vulnerable to a malicious code injection attack, as identified by Checkmarx. This attack allows an attacker to execute spyware and information-stealing malware on systems that have the affected package installed.
Vulnerability Detail
The vulnerability in tpstrmcint originates from a malicious PyPi package published by the EsqueleSquad group. The package contains code that can execute spyware and steal sensitive information from the affected system. This can lead to unauthorized access, data breaches, and potential compromise of user credentials or other sensitive data. The malicious code can be triggered when the package is installed or used in an application.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall tpstrmcintIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, you can manually remove the tpstrmcint package from your project's dependencies and replace it with a trusted alternative. Here is an example of how you can do this using pip:
-
Open your project's terminal or command prompt.
-
Run the following command to uninstall the tpstrmcint package:
pip uninstall tpstrmcint -
Install a trusted alternative package using the following command:
pip install <alternative_package>
Make sure to replace <alternative_package> with the name of the package you want to use as a replacement.
Conclusion
The tpstrmcint package on PyPI has been found to contain malicious code that can execute spyware and steal sensitive information. It is crucial to remove this package from your project and replace it with a trusted alternative. Regularly updating and monitoring your project's dependencies is essential to mitigate the risk of such vulnerabilities. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for tpstrmcint →
FAQ
tpstrmcint is a package available on PyPI that is used for [provide functionality].
The malicious code injection attack occurs when the tpstrmcint package is installed or used in an application. The attacker has published a malicious PyPi package that contains code capable of executing spyware and stealing sensitive information.
The potential ramifications of this vulnerability include unauthorized access to sensitive information, data breaches, and compromise of user credentials or other sensitive data.
To fix this vulnerability, it is recommended to remove the tpstrmcint package from your project and replace it with a trusted alternative. Regularly updating and monitoring your project's dependencies is also crucial to ensure they are free from known vulnerabilities.
You can use tools like Vulert to scan your project's dependencies and receive real-time alerts for any open-source vulnerabilities. Vulert analyzes your Pipfile.lock file to identify vulnerable packages and provides actionable insights for remediation.
