Homepage
About Snyk

Malicious Package Affecting colourama package, versions [0,]

0.0
critical

Snyk CVSS

    Attack Complexity Low
    Confidentiality High
    Integrity High
    Availability High

    Threat Intelligence

    Exploit Maturity Mature

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk ID SNYK-PYTHON-COLOURAMA-72537
  • published 28 Oct 2018
  • disclosed 13 Oct 2018
  • credit Bertus
Report a new vulnerability Found a mistake?

Introduced: 13 Oct 2018

Malicious CVE NOT AVAILABLE CWE-506 Open this link in a new tab

How to fix?

Avoid usage of this package altogether.

Overview

12 Python libraries were identified as malicious packages. colourama was financially-motivated and hijacked an infected users' operating system clipboard, where it would scan every 500ms for a Bitcoin address-like string, which it would replace with the attacker's own Bitcoin address in an attempt to hijack Bitcoin payments/transfers made by an infected user.

On October 13th, 2018 all of these packages have been removed from Pypi.

References