Cybersecurity researchers have discovered a malicious package on the Python Package Index (PyPI) repository that purports to be an application related to the Solana blockchain, but contains malicious functionality to steal source code and developer secrets. The package, named solana-token, is no longer available for download from PyPI, but not before it was downloaded 761 times. It was first
source https://thehackernews.com/2025/05/malicious-pypi-package-posing-as-solana.html
Tuesday, May 13, 2025
Malicious PyPI Package Posing as Solana Tool Stole Source Code in 761 Downloads
.png){kind=avatar}
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment
please do not enter any spam link in the comment box