Two malicious libraries have been detected in the Python package directory PyPI.
Malicious packages "python3-dateutil" and "jeIlyfish" have been discovered in the Python Package Index (PyPI), uploaded by a single author olgired2017 and masquerading as popular packages "dateutil" and "jellyfish" (differentiated by the use of the character "I" (i) instead of "l" (L) in the name). After the installation of these packages, encryption keys and user confidential data found on the server were sent to the attacker. In […]
