A new supply chain attack technique targeting the Python Package Index (PyPI) registry has been exploited in the wild in an attempt to infiltrate downstream organizations. It has been codenamed Revival Hijack by software supply chain security firm JFrog, which said the attack method could be used to hijack 22,000 existing PyPI packages and result in "hundreds of thousands" of malicious package
source https://thehackernews.com/2024/09/hackers-hijack-22000-removed-pypi.html
Wednesday, September 4, 2024
Hackers Hijack 22,000 Removed PyPI Packages, Spreading Malicious Code to Developers
.png){kind=avatar}
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment
please do not enter any spam link in the comment box