Malicious code in ultracc (PyPI)
Summary
MAL-2023-7747: Malicious code in ultracc (PyPI). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
ultracc is a package available on PyPI that is used for [provide brief description of the package's functionality and key attributes]. It is vulnerable to a malicious code injection that was discovered by Checkmarx. This vulnerability allows attackers to execute spyware and information-stealing malware.
Vulnerability Detail
The malicious code injection in ultracc was introduced in version 0. The code was found in a package published by the EsqueleSquad group, which has been distributing nearly 6000 malicious PyPi and NPM packages. The malicious code can be downloaded from the following URLs: [https://dl.dropbox.com/s/tpykidpdjz99202/esquele.exe, https://cdn.discordapp.com/attachments/1090710876639744062/1102575056925761587/bypass2.ps1]. This code can potentially compromise the security and privacy of the users' systems by executing spyware and stealing sensitive information.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall ultraccIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. However, users can mitigate the risk by avoiding the usage of ultracc or by using an alternative package that is not affected by this vulnerability.
Conclusion
The malicious code injection in ultracc poses a significant security risk to users' systems. It is important to update ultracc to a version that is not affected by this vulnerability and regularly verify the integrity of packages to avoid such security risks. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for ultracc →
FAQ
ultracc is a package available on PyPI that is used for [provide brief description of the package's functionality and key attributes].
This vulnerability was discovered by Checkmarx during their security analysis of PyPi and NPM packages. They found a package published by the EsqueleSquad group that contained malicious code.
The potential risks of this vulnerability include the execution of spyware and information-stealing malware, which can compromise the security and privacy of the users' systems.
Yes, Checkmarx has provided a fix for this vulnerability in their report. It is recommended to update ultracc to a version that is not affected by the malicious code injection.
There is no specific workaround mentioned for this vulnerability. However, users can mitigate the risk by avoiding the usage of ultracc or by using an alternative package that is not affected by this vulnerability.
