Mur d'images - Cyberveille

curated by Decio

Using Trusted Protocols Against You: Gmail as a C2 Mechanism...

JFrog Detects Malicious PyPi package Stealing Crypto Tokens

Carding tool abusing WooCommerce API downloaded 34K times on PyPI

Python Crypto Library Updated to Steal Private Keys

Malicious Python Package Targets macOS Developers

Iraq-based cybercriminals deploy malicious Python packages to steal data

Russia-linked 'Lumma' crypto stealer now targets Python devs

Cybercriminals pose as "helpful" Stack Overflow users to push malware

Malicious PyPI packages targeting highly specific MacOS machines

PyPI halted new users and projects while it fended off supply-chain attack

Info Stealing Packages Hidden in PyPI

Three New Malicious PyPI Packages Deploy CoinMiner on Linux Devices | FortiGuard Labs

A pernicious potpourri of Python packages in PyPI

Uncovering thousands of unique secrets in PyPI packages

Users of Telegram, AWS, and Alibaba Cloud targeted in latest supply chain attack

Developers Warned of Malicious PyPI, NPM, Ruby Packages Targeting Macs - SecurityWeek

Nascent Malware Campaign Targets npm, PyPI, and RubyGems Developers

VMConnect supply chain attack continues, evidence points to North Korea - Security Boulevard

Six Malicious Python Packages in the PyPI Targeting Windows Users

PyPI Attackers Still At It: Malicious Packages Drop Trojans and Info-stealers

Bad Actors Are Joining the AI Revolution: Here’s What We’ve Found in the Wild

Supply Chain Attack Using Identical PyPI Packages, “colorslib”, “httpslib”, and “libhttps”

SentinelSneak: Malicious PyPI module poses as security software development kit

Phylum Detects Ongoing Typosquat/Ransomware Campaign in PyPI and NPM

W4SP continues to nest in PyPI: Same supply chain attack, different distribution method

Phylum Discovers Dozens More PyPI Packages Attempting to Deliver W4SP Stealer in Ongoing Supply-Chain Attack

PyPI Phishing Campaign | JuiceLedger Threat Actor Pivots From Fake Apps to Supply Chain Attacks

PyPI package 'ctx' and PHP library 'phpass' compromised to steal environment variables

Malicious PyPI package opens backdoors on Windows, Linux, and Macs