Sources
Loading...
Additional media
Loading...
DeepNewz, mobile.
People-sourced. AI-powered. Unbiased News.
PyPI, the Python Package Index, temporarily halted new user sign-ups and project creations due to a surge of malicious package uploads targeting developers. The attack involved fake Python infrastructure to poison GitHub repositories, including one related to Discord bot discovery. The supply-chain attack aimed to snag cryptocurrency wallets and more, prompting PyPI to fend off the threat.
A malware upload campaign prompted the Python Package Index, aka @pypi, to temporarily suspend new user registrations and new project creations on March 28. #cybersecurity #infosec #ITsecurity https://t.co/bnWfbQToO1
A malware upload campaign prompted the Python Package Index, aka @pypi, to temporarily suspend new user registrations and new project creations on March 28. #cybersecurity #infosec #ITsecurity https://t.co/bnWfbQToO1
PyPI Halts Sign-Ups Amid Surge of Malicious Package Uploads Targeting Developers https://t.co/3LURy5RLtf
