iHash

News and How to's

Python

11 Malicious PyPI Python Libraries Caught Stealing Discord Tokens and Installing Shells

by Leave a Comment

Cybersecurity researchers have uncovered as many as 11 malicious Python packages that have been cumulatively downloaded more than 41,000 times from the Python Package Index (PyPI) repository, and could be exploited to steal Discord access tokens, passwords, and even stage dependency confusion attacks. The Python packages have since been removed from the repository following … [Read more...] about 11 Malicious PyPI Python Libraries Caught Stealing Discord Tokens and Installing Shells

Several Malicious Typosquatted Python Libraries Found On PyPI Repository

by Leave a Comment

As many as eight Python packages that were downloaded more than 30,000 times have been removed from the PyPI portal for containing malicious code, once again highlighting how software package repositories are evolving into a popular target for supply chain attacks. "Lack of moderation and automated security controls in public software repositories allow even inexperienced … [Read more...] about Several Malicious Typosquatted Python Libraries Found On PyPI Repository

[Case Study] How CrowdStrike Upgraded From Python 2 to 3

by Leave a Comment

After more than a decade, the sun has set on Python 2. Love it or hate it, Python 2.7.18 is the final official release — and to remain current with security patches and continue enjoying all of the new developments Python has to offer, it’s time to upgrade to Python 3. Nearly all common Python packages have already made the conversion, and many major projects have dropped … [Read more...] about [Case Study] How CrowdStrike Upgraded From Python 2 to 3