News

Hosted on MSN23d
Malicious Python packages are stealing vital data, and have been downloaded thousands of times already
They claim to be a fix for a legitimate Python module named “bitcoinlib ... the legitimate ‘clw cli’ command with malicious code, exfiltrating sensitive database files.
Developer Tech2d
Chainguard rebuilds Python libraries to slam the door on malware
Chainguard Libraries for Python isn't just another repository; it’s an index of Python dependencies engineered to be ...
The Hacker News3d
Malicious PyPI Package Posing as Solana Tool Stole Source Code in 761 Downloads
The package, named solana-token, is no longer available for download from PyPI, but not before it was downloaded 761 times.
Malicious PyPi package hides RAT malware, targets Discord devs since 2022
A malicious Python package targeting Discord developers with remote access trojan (RAT) malware was spotted on the Python ...
AI-generated code could be a disaster for the software supply chain. Here’s why.
AI-generated computer code is rife with references to non-existent third-party libraries, creating a golden opportunity for ...
Introducing Chainguard Libraries for Python: Malware-Resistant Dependencies Built Entirely from Source
Chainguard, the secure foundation for software development and deployment, today announced Chainguard Libraries for Python, an index of malware-resistant Python dependencies built securely from source ...
Malicious PyPI packages abuse Gmail, websockets to hijack systems
Seven malicious PyPi packages were found using Gmail's SMTP servers and WebSockets for data exfiltration and remote command ...
Hackaday6y
When Good Software Goes Bad: Malware In Open Source
It’s not just Python, either. A similar issue was found ... Each package contained malicious code that grabbed environment variables and uploaded them to the author. How many web devs installed ...