Mur d'images - Cyberveille

curated by Decio

Using Trusted Protocols Against You: Gmail as a C2 Mechanism...

Carding tool abusing WooCommerce API downloaded 34K times on PyPI

Malware found on npm infecting local package with reverse shell

Fake recruiter coding tests target devs with malicious Python packages

Cybercriminals pose as "helpful" Stack Overflow users to push malware

Malicious PyPI packages targeting highly specific MacOS machines

PyPI halted new users and projects while it fended off supply-chain attack

Malicious NPM Packages Exfiltrate Hundreds of Developer SSH Keys via GitHub

Three New Malicious PyPI Packages Deploy CoinMiner on Linux Devices | FortiGuard Labs

A pernicious potpourri of Python packages in PyPI

Uncovering thousands of unique secrets in PyPI packages

The evolutionary tale of a persistent Python threat

Six Malicious Python Packages in the PyPI Targeting Windows Users

Operation Brainleeches: Malicious npm packages fuel supply chain and phishing attacks

Python packages upload your AWS keys, env vars, secrets to the web

Google Online Security Blog: The Package Analysis Project: Scalable detection of malicious open source packages