
Researchers have identified critical vulnerabilities in various software ecosystems, including PyPI (Python), npm (JavaScript), Ruby Gems, NuGet (.Net), Dart Pub, and Rust Crates, which can be exploited to launch software supply chain attacks. These entry-point vulnerabilities, highlighted by Checkmarx researchers, allow attackers to harvest sensitive data using counterfeit packages and system command hijacking. A new strain of malware in the Python Package Index (PyPI) has been found targeting crypto wallets such as MetaMask, TronLink, and Atomic by draining private keys and seed phrases. This malware has already been downloaded over 3,700 times since October.
WordPress Plugin Jetpack Patches Major Vulnerability Affecting 27 Million Sites: https://t.co/qKn8Ox5aRR by The Hacker News #infosec #cybersecurity #technology #news
MALWARE IN PYPI POSES CHALLENGES FOR CRYPTO WALLETS A new strain of malware in the Python Package Index has been identified, affecting wallets like MetaMask and TronLink by targeting private keys and seed phrases. With over 3,700 downloads since October, this situation… https://t.co/Su8BE1hSl4
WATCH OUT: MALWARE IN PYPI IS DRAINING YOUR CRYPTO ASSETS A new malware is creeping through the Python Package Index, draining private keys and seed phrases. It’s slipped into wallet tools like MetaMask, TronLink, and Atomic. Over 3,700 downloads since October have crypto… https://t.co/gJ8uhPSzcd
