マイナビニュース

悪意あるPython コードを用いたPyPIに対する新しい攻撃、発覚

ReversingLabsはこのほど、「When byte code bites: Who checks the contents of compiled Python files?」において、PyPI (Python Package ...
livedoor ニュース

Pythonパッケージリポジトリ「PyPI」にマルウェア混入、注意を

ESETは12月12日(現地時間)、「A pernicious potpourri of Python packages in PyPI」において、公式Pythonパッケージリポジトリ「PyPI」にWindowsおよびLinux環境を標的とする悪意のあるPythonプロジェクトのクラスタを発見したとして、注意を喚起した。 53のプロジェクトから116個 ...
Bleeping Computer

Malicious PyPI packages with over 10,000 downloads taken down

The Python Package Index (PyPI) registry has removed three malicious Python packages aimed at exfiltrating environment variables and dropping trojans on the infected machines. These malicious packages ...
マイナビニュース

不正なPythonパッケージをPyPIに44個発見、利用の有無の確認を

Check Point Software Technologiesは6月16日(米国時間)、「PyPI Suspends New Registrations After Malicious Python Script Attack」において、PyPI (Python Package ...
Infosecurity-magazine.com

New Malicious Python Libraries Found on PyPI Repository

Security researchers from Check Point have spotted 10 malicious packages on Python Package Index (PyPI), the primary Python package index used by Python developers. The first of them was Ascii2text, a ...
Bleeping Computer

Malicious PyPI package with 37,000 downloads steals AWS keys

A malicious Python package named 'fabrice' has been present in the Python Package Index (PyPI) since 2021, stealing Amazon Web Services credentials from unsuspecting developers. According to ...
Dark Reading

Threat Actor Phishing PyPI Users Identified

Security researchers have identified a previously unknown group dubbed "JuiceLedger" as the threat actor behind a recent and first-known phishing campaign specifically targeting users of the Python ...