PyPI Revival Hijack Puts Thousands of Applications at Risk https://t.co/lzy4hHjy3n
‘Revival Hijack’ on PyPI Disguises Malware with Legitimate File Names #cybersecurity https://t.co/rpjsTjOe5e
PyPI loophole puts thousands of packages at risk of compromise https://t.co/XQkfSNNf2t
A new supply chain attack, dubbed 'Revival Hijack,' has compromised over 22,000 removed PyPI packages, spreading malicious code to developers. The attack involves re-registering removed packages with legitimate file names to disguise malware, posing significant risks to DevOps pipelines and thousands of applications. This loophole in PyPI's system has exposed developers to potential security threats, emphasizing the need for heightened vigilance in cybersecurity practices. The attack has already resulted in thousands of downloads of the compromised packages.
