Cybersecurity researchers have uncovered as many as 11 malicious Python packages that have been cumulatively downloaded more than 41,000 times from the Python Package Index (PyPI) repository, and could be exploited to steal Discord access tokens, passwords, and even stage dependency confusion attacks. The Python packages have since been removed from the repository following responsible
from The Hacker News https://ift.tt/3csxvqe
https://ift.tt/eA8V8J
11 Malicious PyPI Python Libraries Caught Stealing Discord Tokens and Installing Shells
November 19, 2021
0
Share your thoughts here.