Homepage
About Snyk

Malicious Package Affecting fshec2 package, versions [0,]

Severity

 Recommended
0.0
critical
0
10

CVSS assessment made by Snyk's Security Team

    Threat Intelligence

    Exploit Maturity
    Mature

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk ID SNYK-PYTHON-FSHEC2-5672158
  • published 8 Jun 2023
  • disclosed 8 Jun 2023
  • credit ReversingLabs
Report a new vulnerability Found a mistake?

Introduced: 8 Jun 2023

Malicious CVE NOT AVAILABLE CWE-506 Open this link in a new tab

How to fix?

Avoid using all malicious instances of the fshec2 package.

Overview

fshec2 is a malicious package. This package uses compiled Python code to evade detection and tries to collect usernames, hostnames, and directory listings.

References

CVSS Scores

version 3.1
Expand this section

Snyk

Recommended
9.8 critical
  • Attack Vector (AV)
    Network
  • Attack Complexity (AC)
    Low
  • Privileges Required (PR)
    None
  • User Interaction (UI)
    None
  • Scope (S)
    Unchanged
  • Confidentiality (C)
    High
  • Integrity (I)
    High
  • Availability (A)
    High