A new malicious PyPI package wave highlights evolving supply chain attacks. Learn how to protect your CI/CD pipelines from credential theft.
PyPi Malware
Critical dYdX supply chain attack: Compromised npm & PyPI packages steal seed phrases & deploy RATs. Remove @dydxprotocol/v4-client-js immediately.
This threat is a concealed malware introduced by an attacker under the pseudonym "kohlersbtuh15" via the PyPi package manager.