11 Malicious PyPI Python Libraries Caught Stealing Discord Tokens and Installing Shells

Discussion in 'News Aggregator' started by Ravie Lakshmanan, 19 Nov 2021.

  1. Cybersecurity researchers have uncovered as many as 11 malicious Python packages that have been cumulatively downloaded more than 41,000 times from the Python Package Index (PyPI) repository, and could be exploited to steal Discord access tokens, passwords, and even stage dependency confusion attacks. The Python packages have since been removed from the repository following responsible

    Continue reading...
     

Share This Page

Loading...