PyPI

Malicious PyPI Package Mimics as SOCKS5 Proxy Tool Attacking Windows Platforms

JFrog’s security research team has identified a malicious PyPI package named SoopSocks that masquerades as a legitimate SOCKS5 proxy utility…

1 year ago

Malicious Typosquatted PyPI Packages Spreading SilentSync RAT

On August 4, 2025, Zscaler ThreatLabz uncovered two malicious Python packages—sisaws and secmeasure—that deliver SilentSync, a Python-based remote access trojan…

1 year ago

Two Malicious Python Packages Steal SSH and GPG Keys Exists in the Python Package Index for a Year

The python security team has removed two malicious python packages that introduced with the Python Package Index (PyPI) aimed to…

7 years ago