Tag: Python packages

The package has since been removed from PyPI, but it amassed 183 downloads since its publication on the platform on ...

Cybersecurity researchers have identified 41 malicious Python packages on the Python Package Index (PyPI) repository posing as legitimate modules.

Checkmarx researchers uncovered an ongoing supply chain attack conducted by a threat actor they tracked as WASP that is targeting ...

Researchers have identified over two dozen Python packages on the PyPI registry that imitate popular libraries but instead drop info-stealers.

Nearly one-third of the packages in PyPI, the Python Package Index, trigger automatic code execution upon downloading them.

Some of these packages either contain code that reads and exfiltrates your secrets or use one of the dependencies that ...