Popular PyPI Package ‘ctx’ and PHP Library ‘phpass’ Hijacked to Steal AWS KeysThe Hacker News

Torna a Articoli

Popular PyPI Package ‘ctx’ and PHP Library ‘phpass’ Hijacked to Steal AWS KeysThe Hacker News

Two trojanized Python and PHP packages have been uncovered in what’s yet another instance of a software supply chain attack targeting the open source ecosystem.
One of the packages in question is “ctx,” a Python module available in the PyPi repository. The other involves “phpass,” a PHP package that’s been forked on GitHub to distribute a rogue update.
“In both cases the attacker appears to haveRead More

Condividi questo post

Torna a Articoli