Get the latest tech news

PyPI package with 1.1M monthly downloads hacked to push infostealer

None

Get the Android app

Or read this on Bleeping Computer

Read more on:

Photo of PyPI

PyPI

Photo of PyPi package

PyPi package

Photo of infostealer

infostealer

Related news:

Telnyx joins LiteLLM in latest PyPI package poisoning tied to Trivy breach

Telnyx package compromised on PyPI

Popular LiteLLM PyPI package backdoored to steal credentials, auth tokens

« Why supply chains are the proving ground for automation‑led iPaaS

Sergey Brin Moves to the Right, With a ‘MAGA Girlfriend’ by His Side »