PyPI
- APPLICATIONS
PyPI Introduces Archival Status to Alert Users About Unmaintained Python Packages
Feb 03, 2025Ravie LakshmananOpen Source / Software Security The maintainers of the Python Package Index (PyPI) registry have announced a…
Read More » - APPLICATIONS
Researchers Uncover PyPI Packages Stealing Keystrokes and Hijacking Social Accounts
Dec 24, 2024Ravie LakshmananMalware / Data Exfiltration Cybersecurity researchers have flagged two malicious packages that were uploaded to the Python…
Read More » - APPLICATIONS
Cryptocurrency Miner Found in PyPI Versions
Dec 07, 2024Ravie LakshmananSupply Chain Attack / Cryptocurrency In yet another software supply chain attack, it has come to light…
Read More » - APPLICATIONS
PyPI Python Library “aiocpa” Found Exfiltrating Crypto Keys via Telegram Bot
Nov 25, 2024Ravie LakshmananSoftware Supply Chain / Malware The administrators of the Python Package Index (PyPI) repository have quarantined the…
Read More » - APPLICATIONS
Malicious PyPI Package ‘Fabrice’ Found Stealing AWS Keys from Thousands of Developers
Nov 07, 2024Ravie LakshmananVulnerability / Cloud Security Cybersecurity researchers have discovered a malicious package on the Python Package Index (PyPI)…
Read More » - APPLICATIONS
PyPI Repository Found Hosting Fake Crypto Wallet Recovery Tools That Steal User Data
Oct 02, 2024The Hacker NewsSupply Chain Attack / Cryptocurrency A new set of malicious packages has been unearthed in the…
Read More » - COMPUTERS
The PyPi Revival Hijack Attack Is Both Horrible And Incredibly Embarassing
Too Cool For Unique IDs The PyPi repository, properly called the Python Package Index delivers community developed Python applications and…
Read More » - APPLICATIONS
Researchers Find Over 22,000 Removed PyPI Packages at Risk of Revival Hijack
Sep 04, 2024Ravie Lakshmanan A new supply chain attack technique targeting the Python Package Index (PyPI) registry has been exploited…
Read More »
