Malicious npm Package Targets Atomic Wallet, Exodus Users by Swapping Crypto Addresses

Threat actors are continuing to upload malicious packages to the npm registry so as to tamper with already-installed local versions of legitimate libraries and execute malicious code in what's seen as a sneakier attempt to stage a software supply chain attack. The newly discovered package, named...

Malicious code in tkcaendar (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4e47063955bce27842f4da6dac58c8104eaefdf470e523858772657fe961606f Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in progressbarr2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ae6c433ee971e37762bf2323a3997615b8ce0a862b4340dc5b8df5d8637eabb1 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in progresbar2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx cde7b3083bf6f1b9e297dd07ceccaf0d422435ff6a262ff42f5c993010da4112 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in psyocks (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 10480265c893bd8a305946e7a2b40f67d3dd8b2f28d94762de4d1b3d27fe6e87 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in psuutil (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 71840b4eaafce178353cc51cd2db42fd77b71973710b0701befec4bebc249ef4 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in webssocket-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2ab9db3d073f75960b5744c1b645d87108a2e1ae1541875e7506962a324072d6 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in teensorflow (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0a2ff806f353099e45e280a9b7aaafd122299635b37541ddd0b931719467693f Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in beatuifulsoup4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx afca11023ecf66d694241e01d9d8126bfb8bc9c5ec11f8af3d0d360297ee5cfd Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in yfinace (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8fb9b040b8ad12632ab1cd1f6eaa89e250d0db7c044e2ab537e22b6b65c3a65c Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in bitcoiinlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2cbbc8c4bbd044e0d0d4c1fc8ecd8689474dd3970478de1797d99e4e3303dfac Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in cxct (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7eed6522b04438f8b117873d5d6e997acf2bae3532e3a68b7c0a512fecdcb9bc Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...