This Week in Malware - 450 packages and a phishing campaign against PyPI maintainers
6 minute read time
This week Sonatype discovered and analyzed 450 packages flagged as malicious, suspicious, or dependency confusion attacks.
Read More...
This Week in Malware — Cryptominers flood npm, PyPI, and more dependency confusion
2 minute read time
This week Sonatype discovered 200+ npm and PyPI packages that are cryptominers, with additional packages comprising dependency confusion PoCs.
Read More...
This Week in Malware - Fileless Linux cryptominer, 100 packages
6 minute read time
This week Sonatype discovered more than 100 open source packages that were malicious, suspicious, or dependency confusion attacks.
Read More...
This Week in Malware — Typosquats in PyPI, dependency confusion packages
2 minute read time
This Week in Malware we discovered 50 packages that are either malicious or dependency confusion attacks.
Read More...
This Week in Malware — John Deere dependency confusion attempt and more
2 minute read time
We discovered and analyzed 17 packages, at least a dozen of which were dependency confusion PoCs directly targeting the agricultural equipment giant John Deere.
Read More...
This Week in Malware — July 15th edition
2 minute read time
This Week in Malware we identified over 34 npm and PyPI packages that are either dependency confusion candidates, prank packages, contain PoC reverse shell.
Read More...
This Week in Malware — Python packages peek into your Telegram, set up Windows RDP access
3 minute read time
This Week in Malware we discovered and analyzed multiple malicious PyPI packages that either set up new Remote Desktop user accounts on your Windows computer.
Read More...
This Week in Malware — Python cryptominers, 345 dependency confusion packages
16 minute read time
This week's highlights include a PyPI typosquat that drops a cryptominer and AWS credential stealer, along with an influx of 345 dependency confusion packages.
Read More...
This Week in Malware — Show me your secrets!
2 minute read time
These Python packages not only exfiltrate your secrets—AWS credentials and environment variables but rather upload these to a publicly exposed endpoint.
Read More...