A naukri.com initiative
Tech Radar
2M
381
Image Credit: Tech Radar
AWS keys stolen by malicious PyPI package with thousands of downloads
- A malicious Python package called 'fabrice' has been discovered in the Python Package Index (PyPI).
- The package is a typosquatted version of the popular 'fabric' library with over 37,000 downloads.
- Its main goal is to steal Amazon Web Service (AWS) login credentials from developers.
- The package exfiltrates the stolen credentials to a VPN server in Paris, France.
Read Full Article
22 Likes
For uninterrupted reading, download the app