Multiple Back-doored Python Libraries Caught Stealing AWS Secrets and Keys
Google details commercial spyware that targets both Android and iOS devices
June 28, 2022CISA Vulnerability Bulletin Summary
June 28, 2022
Summary:
Researchers have discovered a number of malicious Python packages in the official third-party software repository that are engineered to exfiltrate AWS credentials and environment variables to a publicly exposed endpoint. The list of packages includes loglib-modules, pyg-modules, pygrata, pygrata-utils, and hkg-sol-utils, according to Sonatype security researcher Ax Sharma. The packages and as well as the endpoint have now been taken down.
