Malicious libraries using the PyPI CDN to conceal their communication channel have been identified in the PyPI catalog
In the PyPI (Python Package Index) catalog, 11 packages containing malicious code have been identified. Before the issues were discovered, the packages had been downloaded approximately 38,000 times. The identified malicious packages are notable for their elaborate methods of hiding communication channels with the attackers' servers. importantpackage (6305 downloads), important-package (12897) — established connections to an external server disguised as a connection to pypi.python.org to provide […]
