Malicious code in tpvmcpustudy (PyPI)
Summary
MAL-2023-7732: Malicious code in tpvmcpustudy (PyPI). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The tpvmcpustudy package is an open-source Python package available on PyPI. It is designed to study the CPU usage of a virtual machine. The package provides various functions and utilities to monitor and analyze CPU performance. However, the package has been found to contain malicious code.
Vulnerability Detail
The tpvmcpustudy package has been identified as part of a larger set of nearly 6000 malicious PyPi and NPM packages published by the EsqueleSquad group. These packages execute spyware and information-stealing malware. The specific vulnerability in tpvmcpustudy allows the execution of malicious code, potentially leading to unauthorized access, data theft, and other security breaches.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall tpvmcpustudyIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to take immediate action by removing the tpvmcpustudy package and replacing it with a secure alternative.
Conclusion
The tpvmcpustudy package has been found to contain malicious code as part of the larger set of malicious PyPi and NPM packages published by the EsqueleSquad group. It is recommended to remove the tpvmcpustudy package from your project and replace it with a trusted alternative. Regularly updating and reviewing the packages used in your project is essential to mitigate the risk of similar vulnerabilities. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for tpvmcpustudy →
FAQ
tpvmcpustudy is an open-source Python package available on PyPI. It is used for studying the CPU usage of a virtual machine.
The vulnerability was discovered by the Checkmarx team during their analysis of malicious PyPi and NPM packages published by the EsqueleSquad group.
The vulnerability in tpvmcpustudy can lead to the execution of malicious code, which may result in unauthorized access, data theft, and other security breaches.
Yes, the recommended fix is to remove the tpvmcpustudy package from your project and replace it with a trusted alternative.
To prevent similar vulnerabilities, it is crucial to regularly update and review the packages used in your project, ensuring they are from reputable sources and free from known vulnerabilities.
