Mur d'images - Cyberveille

curated by Decio

PyPI halted new users and projects while it fended off supply-chain attack

Info Stealing Packages Hidden in PyPI

Three New Malicious PyPI Packages Deploy CoinMiner on Linux Devices | FortiGuard Labs

A pernicious potpourri of Python packages in PyPI

Uncovering thousands of unique secrets in PyPI packages

Users of Telegram, AWS, and Alibaba Cloud targeted in latest supply chain attack

Developers Warned of Malicious PyPI, NPM, Ruby Packages Targeting Macs - SecurityWeek

Nascent Malware Campaign Targets npm, PyPI, and RubyGems Developers

VMConnect supply chain attack continues, evidence points to North Korea - Security Boulevard

Six Malicious Python Packages in the PyPI Targeting Windows Users

PyPI Attackers Still At It: Malicious Packages Drop Trojans and Info-stealers

Bad Actors Are Joining the AI Revolution: Here’s What We’ve Found in the Wild

Supply Chain Attack Using Identical PyPI Packages, “colorslib”, “httpslib”, and “libhttps”

SentinelSneak: Malicious PyPI module poses as security software development kit

Phylum Detects Ongoing Typosquat/Ransomware Campaign in PyPI and NPM

W4SP continues to nest in PyPI: Same supply chain attack, different distribution method

Phylum Discovers Dozens More PyPI Packages Attempting to Deliver W4SP Stealer in Ongoing Supply-Chain Attack

PyPI Phishing Campaign | JuiceLedger Threat Actor Pivots From Fake Apps to Supply Chain Attacks

PyPI package 'ctx' and PHP library 'phpass' compromised to steal environment variables

Malicious PyPI package opens backdoors on Windows, Linux, and Macs