#PyPI: 20 Malicious Python PyPI Packages Stole Cloud Tokens - Over 14,100 Downloads Before Removal:
#SoftwareSupplyChainSecurity
👇
https://thehackernews.com/2025/03/malicious-pypi-packages-stole-cloud.html
Sam Stepanyan :verified: 🐘 /
npub18d…rltg5
2025-03-17 00:48:11
Author Public Key
npub18d0arwv295u03fd825dvn5eharfx25rtrkemffxnar9dzn82drtssrltg5Published at
2025-03-17 00:48:11Event JSON
{
"id": "2497bc3ce8e29f0be7e70e6d4f1b9e025fc689c46f32a502691d17d22344cafd",
"pubkey": "3b5fd1b98a2d38f8a5a7551ac9d337e8d265506b1db3b4a4d3e8cad14cea68d7",
"created_at": 1742172491,
"kind": 1,
"tags": [
[
"t",
"pypi"
],
[
"t",
"SoftwareSupplyChainSecurity"
],
[
"proxy",
"https://infosec.exchange/users/securestep9/statuses/114175016408931891",
"activitypub"
]
],
"content": "#PyPI: 20 Malicious Python PyPI Packages Stole Cloud Tokens - Over 14,100 Downloads Before Removal:\n#SoftwareSupplyChainSecurity\n👇\nhttps://thehackernews.com/2025/03/malicious-pypi-packages-stole-cloud.html",
"sig": "f99ec78f8df40224a98e110688a0684d48ce38f3bd5d3c779bd2cc3e1bf0ed4a37f184972e1cd9ca5ecf4bfdeb66b4cd4a6f5acd224e8a21fbc7676d6bb1b251"
}