Malicious libraries using the PyPI CDN to obscure communication channels have been identified in the PyPI catalog.
Eleven packages containing malicious code have been detected in the PyPI (Python Package Index). Before being identified, the packages were downloaded approximately 38,000 times in total. The identified malicious packages are notable for employing intricate methods to hide communication channels with the attackers' servers. importantpackage (6305 downloads), important-package (12897) — established a connection to an external server disguised as a connection to pypi.python.org for providing […]
