Malicious code in urlcc (PyPI)
Summary
MAL-2023-7778: Malicious code in urlcc (PyPI). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The urlcc package is an open-source Python package available on PyPI. It is used for URL encoding and decoding. The package provides functionality to encode and decode URLs, making it easier to handle special characters and ensure proper formatting. However, the package has been found to contain malicious code, which poses a security risk to users who install and use it.
Vulnerability Detail
The urlcc package has been identified as containing malicious code. This code can execute spyware and information-stealing malware on the user's system. The malicious code is present in the package's source code and is executed when the package is installed and used. This poses a significant risk to users' privacy and security, as sensitive information can be stolen and used for malicious purposes.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall urlccIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, you can manually remove the urlcc package from your project and replace it with a trusted alternative for URL encoding and decoding. Make sure to carefully review the replacement package and ensure it does not contain any known vulnerabilities or malicious code. Here is an example of how to remove the urlcc package using pip:
pip uninstall urlcc
Conclusion
The urlcc package on PyPI has been found to contain malicious code that can execute spyware and information-stealing malware. It is crucial to remove this package from your project and replace it with a trusted alternative. Additionally, take steps to ensure your system is free from malware and keep your security software up to date. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for urlcc →
FAQ
The urlcc package is a Python package available on PyPI that provides functionality for URL encoding and decoding.
The malicious code in urlcc is designed to execute spyware and information-stealing malware on the user's system. It is triggered when the package is installed and used, allowing the attacker to gather sensitive information.
Using the urlcc package can result in the compromise of sensitive information, such as login credentials, personal data, or financial information. This can lead to identity theft, financial loss, or unauthorized access to accounts.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability. Simply enter your Pipfile.lock and Vulert will analyze it for any open-source vulnerabilities, including the malicious code in urlcc.
If your application is affected by this vulnerability, it is recommended to remove the urlcc package and replace it with a trusted alternative. Additionally, scan your system for any signs of malware or spyware and take appropriate actions to remove them.
