Snyk has a published code exploit for this vulnerability.
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applicationsAvoid using all malicious instances of the pyghoster
package.
pyghoster is a malicious package.
The attack chain is triggered by package installation via malicious code embedded within the setup.py
file. The scripts then deploy VBScript and batch files within the System64
directory that download and execute a file named Runtime.exe
. This file is a Python program that is designed to steal extensive sensitive information from the compromised system, various browsers, and applications.