Malicious code in selfrandpong (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8e7113b1dfe42995a4f889912fe9057132c7d74f98dbdd643b4c8169b4df7194 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libadstringstudy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6f7a48026fbb5621cb61650ec6a9f568106410b9b656588689d3e954bb3dde21 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-toolkill (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6332a2241be73f4a227b0ee54ee290b8eef6bef3c5cf4d255e33dfa5be13ffcd EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-visaver (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3b212bd33c72fe6accf5b9bf26a8c69f0828cb93c36876c2d884e1d1a29a771b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfstrpyw (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 23186f64b90d4794a98edff00ca9b05c9413f9906b7bf2d32eaa80f494646489 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in ultramine (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ba7672fff2bde674fd944fbbb04d3ba27925585113cc79e3ecefa2d96d0eed1e EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in grandsuper (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 20189541ae6a6077a70c77758e2fc0cef6cbdf80b499b4710d4f50c23cd6e7bb EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

IconBurst software supply chain attack offers malicious versions of NPM packages

Researchers discovered evidence of a widespread software supply chain attack involving malicious Javascript packages offered via the npm package manager. The threat actors behind the IconBurst campaign used typosquatting to mislead developers looking for very popular packages. npm npm is short fo...

Virus Bulletin 2018: Microsoft’s Lambert on How Cloud is Changing Security

MONTREAL – As businesses increasingly turn to the cloud and to software-as-a-service applications, they are finding themselves with new attack surfaces and new types of threats – specifically, hard-to-thwart supply-chain attacks that have the potential for large amounts of collateral damage. In a...