Software downloaded 30,000 times from #PyPI ransacked developers’ machines
https://arstechnica.com/gadgets/2021/07/malicious-pypi-packages-caught-stealing-developer-data-and-injecting-code/
#security #supplychainattack
https://arstechnica.com/gadgets/2021/07/malicious-pypi-packages-caught-stealing-developer-data-and-injecting-code/
#security #supplychainattack
Ars Technica
Software downloaded 30,000 times from PyPI ransacked developers’ machines
Expect to see more of these "Frankenstein" malware packages, researchers warn.