New Malicious PyPI Packages Uses DLL Sideloading
Researchers have discovered that threat actors have been using open-source platforms and codes for several purposes, such as hosting C2 ...
Read moreTag: Packages
A pernicious potpourri of Python packages in PyPI
ESET Research has discovered a cluster of malicious Python projects being distributed in PyPI, the official Python package repository. The ...
Read more
Malicious NPM Packages Hid TurkoRat Infostealer
Two malicious npm packages concealed an infostealer called TurkoRat for two months before they were detected by researchers and removed. ...
Read more
Malicious NPM, PyPI Packages Stealing User Information
Check Point and Phylum are warning of recently identified NPM and PyPI packages designed to steal user information and download ...
Read more
Timing Attacks Can Be Used to Check for Existence of Private NPM Packages
Container and cloud-native application security provider Aqua Security warns that the existence of private NPM packages can be disclosed by ...
Read moreDozens of Malicious Data-Harvesting NPM Packages Found
Researchers have uncovered a software supply-chain attack involving packages hosted on the Node Package Manager (npm), which is the package ...
Read moreNew OpenSSF Project Hunts for Malicious Packages in Open Source Repositories
The Open Source Security Foundation (OpenSSF) has announced a new project whose goal is to help identify malicious packages in ...
Read moreAzure Developers Targeted By Malicious NPM Packages
An unknown attacker recently uploaded more than 200 malicious npm packages that targeted npm developers looking for Azure tools and ...
Read more
