Cybersecurity researchers have uncovered malicious packages uploaded to the Python Package Index (PyPI) repository that act ...

Malicious dbgpkg package on PyPI poses as a debugging utility but acts as a delivery mechanism for a stealthy backdoor ...

The package, named solana-token, is no longer available for download from PyPI, but not before it was downloaded 761 times.

Researchers found three malicious PyPI packages, two targeting bitcoin ... They claim to be a fix for a legitimate Python module named “bitcoinlib”, which contains features for creating ...

given the widespread use of Python. In March, North Korean hacking group Lazarus was found to have uploaded malicious packages to the repository. In 2022, compromised versions of ctx, a module ...