The official software repository for the Python language, Python Package Index (PyPI), has been targeted in a complex supply chain attack that appears to have successfully poisoned at least two legitimate projects with credential-stealing malware, researchers said on Thursday ().
Actors behind PyPI supply chain attack have been active since late 2021
September 1, 2022
1 min. read