Malicious Code in visagrand (PyPI)
Summary
MAL-2023-7847: Malicious code in visagrand (PyPI). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
visagrand is a package available on PyPI that provides functionality for [insert functionality]. It is widely used in [mention specific use cases or industries]. The package is vulnerable to a recently discovered malicious code injection.
Vulnerability Detail
The vulnerability in visagrand is a result of a malicious code injection by the EsqueleSquad group. They published nearly 6000 malicious PyPi and NPM packages, including visagrand, which executes spyware and information-stealing malware. The malicious code can be found in the package's [insert specific file or module]. This vulnerability poses a significant risk to users as it can lead to unauthorized access, data theft, and potential compromise of the entire system.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall visagrandIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is crucial to update to the latest non-malicious version of visagrand to mitigate the risk.
Conclusion
The malicious code injection in visagrand poses a significant risk to users, potentially leading to unauthorized access, data theft, and system compromise. It is crucial to update to the latest non-malicious version of visagrand to mitigate these risks. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for visagrand →
FAQ
You can use Vulert's playground at [insert Vulert playground URL] to check if your application is affected by this vulnerability. Simply provide your Pipfile.lock, and Vulert will analyze it in real-time and alert you if any open-source vulnerabilities, including this one, are found.
The potential consequences of this vulnerability include unauthorized access to sensitive information, data theft, and potential compromise of the entire system. It is crucial to update to the non-malicious version of visagrand to mitigate these risks.
At this time, there is no evidence of exploitation in the wild. However, given the widespread distribution of the malicious packages, it is essential to update to the non-malicious version of visagrand as soon as possible.
This vulnerability was discovered by Checkmarx, a security research group. They have been actively monitoring and identifying malicious packages, including visagrand, to protect the open-source community.
If you come across any suspicious packages or vulnerabilities, you can report them to Checkmarx by contacting their supply chain security team at [insert email address] or through their website at [insert website URL]. They appreciate the community's help in identifying and addressing such security risks.
