/
ttps_attack:T1573.002 × victim_sectors:"software development" × limpar

Resultados

2 casos · pág. 1/1

safedep.io · high

sckit: Go implant framework found in MemTensor npm and PyPI packages steals developer and CI credentials for supply chain worm spread

SafeDep analyzed sckit (the "supplychain.local worm"), a previously unreported cross-platform Go implant framework found on September 23, 2026 in the compromised MemTensor packages @memtensor/email protected (npm) and email protected (PyPI). It harvests credentials from developer machines and CI jobs, takes signed tasks from a C2 server, …

technology software development
bleepingcomputer.com · · 7 fontes · 8 atualizações critical

LiteLLM 1.107.0 trojanized on PyPI and Docker via stolen GitHub CLI tokens: infostealer and RCE backdoor through Python startup hooks

The LiteLLM release 1.107.0 (a widely used open source LLM proxy and AI gateway developed by BerriAI, about 23 million weekly downloads per theregister.com and gbhackers.com, or about 92 million monthly PyPI downloads per bleepingcomputer.com) was trojanized on PyPI on 21 October 2026 and carries a credential stealer (privcollect) plus a …

technology software