Flooding public package repositories with malicious packages is not entirely new. Last year researchers detected a group of 186 packages from the same account on the JavaScript npm repository that ...

In 2020 it announced Windows Package Manager and winget, a package manager that’s being built-in to the Windows App Installer tools.

Malicious Python Repository Package Drops Cobalt Strike on Windows, macOS & Linux Systems The PyPI "pymafka" package is the latest example of growing attacker interest in abusing widely used open ...

The full list of 116 packages can be found in our GitHub repository. It’s worth noting that malware in a PyPI project repository isn’t a security issue with PyPI itself.