PyPI

PyPI Supply Chain Attack: “cloudscrapersafe” Steals Credit Cards via Fake Python Library

• Malware

PyPI Supply Chain Attack: “cloudscrapersafe” Steals Credit Cards via Fake Python Library

Do Son July 20, 2025 0

Imperva uncovered a PyPI supply chain attack: "cloudscrapersafe" disguised as a legitimate Python library, stealing credit card data and exfiltrating it to a Telegram bot.

PyPI Bans Inbox.ru After Massive Spam Campaign and 1,500+ Fake Project Uploads

• Cybercriminals

PyPI Bans Inbox.ru After Massive Spam Campaign and 1,500+ Fake Project Uploads

Do Son July 17, 2025 0

PyPI has banned inbox.ru registrations after a large-scale spam campaign created over 1,500 fake projects, exploiting name confusion and impersonation.

Alert: Malicious Python Package “psslib” Typosquats passlib, Shuts Down Windows Systems

• Malware

Alert: Malicious Python Package “psslib” Typosquats passlib, Shuts Down Windows Systems

Do Son June 26, 2025 0

A malicious Python package, 'psslib,' typosquats the popular 'passlib' library, forcing immediate Windows system shutdowns, causing data loss for unsuspecting developers.

PyPI Supply Chain Attack Steals Solana Private Keys via Covert Monkey-Patching

• Malware

PyPI Supply Chain Attack Steals Solana Private Keys via Covert Monkey-Patching

Do Son June 2, 2025 0

A sophisticated PyPI supply chain attack, "cappership," steals Solana private keys by monkey-patching, leveraging transitive dependencies and blockchain exfiltration.

setuptools Flaw Exposes Millions of Python Users to RCE

• Vulnerability

setuptools Flaw Exposes Millions of Python Users to RCE

Do Son May 21, 2025 0

A high-severity path traversal flaw in setuptools can allow RCE, exposing millions of Python users. Update to 78.1.1 now.

PyPI Malware Alert: Malicious ‘solana-token’ Package Targets Solana Developers

• Malware

PyPI Malware Alert: Malicious ‘solana-token’ Package Targets Solana Developers

Do Son May 15, 2025 0

A malicious PyPI package named 'solana-token' targeted Solana developers to steal code and secrets. Learn how it worked and how to stay safe.

Malicious Python Packages Exploited Gmail as Covert Command-and-Control Channels

• Malware

Malicious Python Packages Exploited Gmail as Covert Command-and-Control Channels

Do Son May 2, 2025 0

Socket discovers Python packages abusing Gmail SMTP for covert C2 tunnels, evading firewalls and exfiltrating data through trusted email infrastructure.

Malicious Packages Stealing Crypto Credentials: A Warning for Developers

• Malware

Malicious Packages Stealing Crypto Credentials: A Warning for Developers

Do Son April 23, 2025 0

Malicious open-source packages are stealing crypto wallet credentials! Learn about the threat and how to protect your seed phrases and private keys.

PyPI Swiftly Patches Privilege Escalation Flaw in Organizations Feature

• Vulnerability

PyPI Swiftly Patches Privilege Escalation Flaw in Organizations Feature

Do Son April 15, 2025 0

PyPI resolved a security issue on April 14, 2025, where users retained team privileges after organization removal. The swift 2-hour fix prevented potential escalation.

Malicious Packages Weaponize OAST for Stealthy Data Exfiltration and Reconnaissance

• Cyber Security
• Malware

Malicious Packages Weaponize OAST for Stealthy Data Exfiltration and Reconnaissance

Do Son January 5, 2025 0

Uncover the misuse of OAST techniques by threat actors. Learn how ethical security assessments tools are being hijacked for nefarious purposes.

Project Quarantine: PyPI’s New Line of Defense Against Malware

• Malware
• Technology

Project Quarantine: PyPI’s New Line of Defense Against Malware

Do Son January 2, 2025 0

Enhance security in the Python ecosystem with Project Quarantine. Learn how PyPI's new feature mitigates risks from malicious packages.

PyPI Poisoned: “Zebo” and “Cometlogger” Downloaded Hundreds of Times

• Malware

PyPI Poisoned: “Zebo” and “Cometlogger” Downloaded Hundreds of Times

Do Son December 25, 2024 0

Ensure your cybersecurity by understanding the dangers of zebo and cometlogger, the malicious packages that were hidden on PyPI.

Malicious PyPI Package Targets Cryptocurrency Wallets: aiocpa Campaign Exposed

• Malware

Malicious PyPI Package Targets Cryptocurrency Wallets: aiocpa Campaign Exposed

Do Son November 29, 2024 0

Stay informed about the latest supply chain attack on cryptocurrency wallets via PyPI. Discover the malicious aiocpa package and steps to enhance your security.

Malicious Update in Python Crypto Library Targets Private Keys via Telegram

• Malware

Malicious Update in Python Crypto Library Targets Private Keys via Telegram

Do Son November 23, 2024 0

Uncover the alarming details of the PyPI crypto library attack. Find out how private keys were exfiltrated by a malicious update.

PyPI Under Attack: Malicious Crypto-Stealing Packages Discovered

• Malware

PyPI Under Attack: Malicious Crypto-Stealing Packages Discovered

Do Son October 3, 2024 0

Beware of malicious Python packages in the popular PyPI repository. Learn how crypto-stealing packages are targeting users of popular wallets.

Roblox Cheaters Targeted: Skuld Stealer and Blank Grabber Malware Lurks in PyPI Packages

• Malware

Roblox Cheaters Targeted: Skuld Stealer and Blank Grabber Malware Lurks in PyPI Packages

Do Son October 1, 2024 0

Protect yourself from Skuld Stealer & Blank Grabber: two dangerous malware that exploits Roblox players using cheats and mods for an unfair advantage

Revival Hijack: A New PyPI Hijacking Technique Threatens Thousands of Packages

• Malware
• Vulnerability

Revival Hijack: A New PyPI Hijacking Technique Threatens Thousands of Packages

Do Son September 4, 2024 0

Learn about the Revival Hijack technique and how it puts over 22,000 PyPI packages at risk. Discover the new attack vector exploited by malicious actors.

Malicious PyPI Packages Expose User Credentials

• Malware

Malicious PyPI Packages Expose User Credentials

Do Son August 1, 2024 0

Beware of Python Package Index malware! Learn about the recently discovered malicious packages that can steal sensitive information from your system.

xFileSyncerx: Malicious Package with Wiper Components Discovered on PyPI

• Malware

xFileSyncerx: Malicious Package with Wiper Components Discovered on PyPI

Do Son June 6, 2024 0

ReversingLabs researchers uncovered a malicious open-source package on the Python Package Index (PyPI) called xFileSyncerx

Hackers Target PyPI with Malicious Go Binary Hidden in Image

• Malware

Hackers Target PyPI with Malicious Go Binary Hidden in Image

Do Son May 13, 2024 0

The malicious package, disguised as a fork of the widely used "requests" library, contained a hidden Go binary embedded within a PNG image

PyPI Takes Emergency Measures to Combat Malicious Package Flood

• Cyber Security
• Malware

PyPI Takes Emergency Measures to Combat Malicious Package Flood

Do Son March 28, 2024 0

PyPi, a vital repository for open-source software, has taken the drastic step of temporarily halting new user registrations and project creation

Lazarus Hacking Group’s Malicious Python Packages Uncovered

• Cyber Security
• Malware

Lazarus Hacking Group’s Malicious Python Packages Uncovered

Do Son February 27, 2024 0

This attack, attributed to the infamous Lazarus hacking group, leverages a dangerous tactic: preying on developers' typos to install malware