According to researchers at cybersecurity companies Sekoia and YesWeHack, the packages are hosted on the Python Package Index (PyPI), a platform used by Python developers to source and share code.
Malicious tensorlake npm version 0.5.144 contained a Shai-Hulud worm that harvests credentials and can republish compromised packages.
Trellix highlighted findings from its latest Trellix SecondSight Threat Hunting Report with implications for Indian organizations. Examining five critical campaigns observed between January and June ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results