Python

AsyncRAT Abusing Python and TryCloudflare For Stealthy Malware Delivery

In a significant finding, Forcepoint's X-Labs research team has uncovered a new malware campaign that uses AsyncRAT, a notorious remote…

2 years ago

Beware of Fake DeepSeek PyPI packages that Delivers Malware

The Positive Technologies Expert Security Center (PT ESC) recently uncovered a malicious campaign targeting the Python Package Index (PyPI) repository.…

2 years ago

PyPl Added Project Archival To Stop Attackers to Weaponize Malicious Packages

The Python Package Index (PyPI) has introduced a new feature that allows maintainers to mark projects as archived, signaling that…

2 years ago

Weaponized Python Scripts Deliver New SwaetRAT Malware

The Python script leverages low-level interactions with the Windows operating system, which imports crucial libraries like `System.Reflection`, `ctypes`, and `wintypes`,…

2 years ago

Two PyPi Malicious Package Mimic ChatGPT & Claude Steals Developers Data

Two malicious Python packages masquerading as tools for interacting with popular AI models ChatGPT and Claude were recently discovered on…

2 years ago

Beware Of Malicious Python Packages That Steal Users Sensitive Data

Malicious Python packages uploaded by "dsfsdfds" to PyPI infiltrated user systems by exfiltrating sensitive data to a Telegram bot likely…

2 years ago

Python Developers Beware! Russian Hackers Targeting You With Malicious Packages

A malicious Python package named "crytic-compilers" was identified on PyPI. Masquerading as a legitimate library for intelligent contract compilation, it…

2 years ago

Malicious PyPI & NPM Packages Attacking MacOS Users

Cybersecurity researchers have identified a series of malicious software packages targeting MacOS users. These packages, found on the Python Package…

2 years ago

170K+ Python Developers GitHub Accounts Hacked in Supply Chain Attack

Over 170,000 users have fallen victim to a meticulously orchestrated scheme exploiting the Python software supply chain. The Checkmarx Research…

3 years ago

Beware of Typos that May lead to Malicious PyPI Package Installation

Cybersecurity experts have raised alarms over a new threat vector targeting Python developers: typo-squatting on the Python Package Index (PyPI).…

3 years ago