Malicious code in vmgame (PyPI)
Summary
MAL-2023-7873: Malicious code in vmgame (PyPI). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The vmgame package is an open-source Python package available on PyPI. It is designed to provide functionality for creating and managing virtual machines. The package is widely used in various projects and provides essential features for virtualization. However, it has been discovered that the package contains malicious code, which poses a significant security risk to users.
Vulnerability Detail
The vmgame package has been found to include malicious code introduced by the Checkmarx group. This code is designed to execute spyware and information-stealing malware on the affected systems. The malicious code can be triggered when using the package, potentially compromising sensitive information and exposing users to various security threats. The origin of this vulnerability is the inclusion of the malicious code in the package's source code.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall vmgameIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to take immediate action by removing the vmgame package and following the recommended steps to mitigate the risk.
Conclusion
The presence of malicious code in the vmgame package poses a severe security risk to users. It is crucial to take immediate action by removing the package, updating affected systems, and conducting a thorough security audit. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for vmgame →
FAQ
This vulnerability can lead to the execution of spyware and information-stealing malware on affected systems. It can result in the compromise of sensitive information, unauthorized access, and potential damage to the affected systems.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability. Simply provide your Pipfile.lock file, and Vulert will analyze it for any open-source vulnerabilities, including this specific issue.
The fix for this vulnerability involves removing the vmgame package from your projects and systems. It is crucial to update the affected systems and perform a thorough security audit to ensure no other vulnerabilities or malicious code are present.
This vulnerability was discovered by Checkmarx, a security research group. They identified the presence of malicious code in the vmgame package and reported it to the relevant authorities.
For more information about this vulnerability and its impact, you can contact supplychainsecurity@checkmarx.com or visit https://bit.ly/checkmarx-malicious-packages.
