MSC-2026-5233

Three malicious PyPI packages uuid32-utils, colorinal, termncolor attributed to the OceanLotus APT group were discovered delivering ZiChatBot malware as part of a supply chain attack. Upon installation, the packages drop and execute a backdoor terminate.dll on Windows / terminate.so on Linux that...

PyPI Packages Deliver ZiChatBot Malware via Zulip APIs on Windows and Linux

Cybersecurity researchers have discovered three packages on the Python Package Index PyPI repository that are designed to stealthily deliver a previously unknown malware family called ZiChatBot on Windows and Linux systems. "While these wheel packages do implement the features described on their...