Malicious Code in tpurled (PyPI)
Summary
MAL-2023-7681: Malicious code in tpurled (PyPI). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
tpurled is a package available on PyPI that is used for [provide brief description of its functionality]. It is vulnerable to a malicious code injection attack, which can lead to the execution of spyware and information-stealing malware on the affected system.
Vulnerability Detail
The vulnerability in tpurled (PyPI) originates from a malicious package published by the EsqueleSquad group. This package contains code that can compromise the security of the system by executing spyware and stealing sensitive information. The malicious package can be identified by its SHA256 hash: 2062c3e66a1f6a9b88a97c82379f44716c5d579f0e0a4fc5fb9edc9df4be9c1a. The impact of this vulnerability can be severe, as it allows unauthorized access to sensitive data and can lead to further exploitation of the affected system.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall tpurledIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. However, users can follow the steps mentioned in the 'how_to_fix' section to mitigate the risk associated with this vulnerability.
Conclusion
The tpurled package on PyPI is vulnerable to a malicious code injection attack, which can lead to the execution of spyware and information-stealing malware. It is crucial to take immediate action to remove the vulnerable package and replace it with a trusted version. Regularly updating packages and dependencies, as well as implementing security measures, can help prevent similar vulnerabilities in the future. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for tpurled →
FAQ
You can use the Vulert Playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. It analyzes your Pipfile.lock and provides real-time alerts for open-source vulnerabilities.
The potential consequences of this vulnerability include unauthorized access to sensitive information, data theft, and the execution of spyware on the affected system.
Yes, the recommended fix is to remove the tpurled package from the system and replace it with a trusted version. Regularly updating packages and dependencies is also crucial to ensure the latest security patches are applied.
This vulnerability was discovered by Checkmarx, a security company specializing in supply chain security. They can be contacted at supplychainsecurity@checkmarx.com for further information.
To prevent similar vulnerabilities in the future, it is important to only use trusted packages from reputable sources. Regularly updating packages and dependencies, as well as conducting security audits and scans, can also help identify and mitigate potential vulnerabilities.
