Sources
Loading...
Additional media
Loading...
DeepNewz, mobile.
People-sourced. AI-powered. Unbiased News.
A series of sophisticated software supply chain attacks have targeted major platforms like GitHub and PyPI, impacting developers and users. Malicious actors used fake Python infrastructure to compromise accounts and repositories, affecting over 170,000 Top.gg users and disrupting the Discord bot community. PyPI temporarily halted sign-ups due to a surge of malicious package uploads aimed at developers.
PyPI Halts Sign-Ups Amid Surge of Malicious Package Uploads Targeting Developers https://t.co/3LURy5RLtf
⚠️ 👩💻 PyPI under attack...again. 🐍 Python's Package Index temporarily shut down new user sign-ups and project creation due to a surge of malicious typosquatting attempts. Learn more: https://t.co/VtO3wmqvve #Malware aimed to snag #cryptocurrency wallets and more. #DevSecOps
An unnamed #ThreatActor used fake #python infrastructure to poison multiple #GitHub code repositories, including one dedicated to @Discord bot discovery platform Top[.]gg. ☠️ https://t.co/3CE7TCQd57
