Malicious code in judyb-advanced (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5284 Malicious code in judyb-advanced (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Researchers Uncover PyPI Package Hiding Malicious Code Behind Image File

A malicious package discovered on the Python Package Index PyPI has been found employing a steganographic trick to conceal malicious code within image files. The package in question, named "apicolor," was uploaded to the Python third-party repository on October 31, 2022, and described as a "Core...