Tag: pypi

Malware Security AI Announcements Engineering Technology Open Source SCA Compliance & SBOM CI/CD

An Attacker Hijacked an AI Coding Assistant to Spread a Worm

An attacker took over a live AI coding assistant session, got it to recommend a poisoned package, and used the stolen tokens to spread the Shai-Hulud worm across about 100 internal repositories.

Security

sckit: A New Go Implant Framework for Supply Chain Worms

sckit is a Go implant framework that steals developer and CI credentials and carries templates to spread through npm, PyPI, and GitHub Actions. Static analysis and indicators of compromise.

Malware

Inside the Miasma Software Supply Chain Attack Toolkit

The Miasma worm source code appeared on GitHub through compromised developer accounts. The codebase is a full supply chain attack toolkit with credential exfiltration across AWS, Azure, GCP, and...

Security

MemTensor npm and PyPI Packages Hit by a Go Worm

An attacker used a Go worm to steal CI publish tokens from MemTensor and ship malicious MemOS packages to npm and PyPI. See how it works, with code and indicators of compromise.

Malware

mrmustard PyPI Package Trojanized to Steal Credentials

Version 0.7.4 of Xanadu's mrmustard quantum computing library shipped to PyPI with no matching GitHub release. It carries a 258-line credential stealer that harvests SSH keys, AWS and Kubernetes...