Hugging Face Says Autonomous AI Agent System Breached Production Infrastructure

An AI-led cyberattack breached limited Hugging Face datasets and service credentials, while public models, Spaces and published packages showed no signs of tampering...

Malicious code in webpack-apollo-remark-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421ceeabb85389e3b45f969cde72ca79241252f1cf6315d2f730f5367e54ce8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2023-4330 Malicious code in libpipultravirtual (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7fcc0ea3b75f3b40abcfb64156cfe1244cf729c1511a1e325ca450c73a7ee9f4 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6769 Malicious code in selfvisacontrolcraft (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 74142c59400f26ddc56ff01795940f8019c760e6e0f2693818015bf397a6e5ac EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqverpostcontrol (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5557ef8230eb6d7092ac13761f020f12ffc45f89b55910fffb4f9001ec7ebc8e EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqpostinfostr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 61d866fa994654813c8b81aad534f70afc2b8ed265d3dd747c89daf7e7d5d16d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-2727 Malicious code in esqadintellgtb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx df0505236b6a1a30303082259e3575e61128bac6a57622f994f7fd68c60f2234 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4640 Malicious code in libvisagui (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b4a4a21fc53ac9f0c78db4203e8766ea92582ad52929ebbae52b383c18580d9d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...