#maliciouscode — Public Fediverse posts

Malicious Code Infiltrates Python Package Index

A recent supply-chain attack on a popular Python package has raised a critical question: how much trust do you really have in the software that quietly powers your work? A malicious .pth file hidden in the litellm package version 1.82.8 can automatically execute malicious code on every Python startup.

https://osintsights.com/malicious-code-infiltrates-python-package-index?utm_source=mastodon&utm_medium=social

#SupplyChain #PythonPackageIndex #MaliciousCode #EmergingThreats #SoftwareCompromise

📢 Oh no, the Telnyx Python SDK has been breached! 😱 Apparently, someone thought it was a great idea to sneak malicious code into #PyPI. 🚨 This is what happens when your "supply chain security" is more like "supply chain Swiss cheese." 🧀🔒
https://telnyx.com/resources/telnyx-python-sdk-supply-chain-security-notice-march-2026 #TelnyxSDK #Breach #MaliciousCode #SupplyChainSecurity #Vulnerability #HackerNews #ngated

📢 Oh no, the Telnyx Python SDK has been breached! 😱 Apparently, someone thought it was a great idea to sneak malicious code into #PyPI. 🚨 This is what happens when your "supply chain security" is more like "supply chain Swiss cheese." 🧀🔒
https://telnyx.com/resources/telnyx-python-sdk-supply-chain-security-notice-march-2026 #TelnyxSDK #Breach #MaliciousCode #SupplyChainSecurity #Vulnerability #HackerNews #ngated

When I use Channel4(UK) app, whenever a McDonald's advert comes on, the app will freeze on an image while subtitles and sound usually carry on -- causing me to need to close the app.

I call this the Channel4 "Google Play Services, Adobe, Location Tracking, Malicious Code" glitch. 👍

#Google #Android #Adobe #LocationTracking #MaliciousCode #Channel4UK #SpyCops

When I use Channel4(UK) app, whenever a McDonald's advert comes on, the app will freeze on an image while subtitles and sound usually carry on -- causing me to need to close the app.

I call this the Channel4 "Google Play Services, Adobe, Location Tracking, Malicious Code" glitch. 👍

#Google #Android #Adobe #LocationTracking #MaliciousCode #Channel4UK #SpyCops

"Just because a piece of software is #OpenSource it does not mean the software is secure." --me

I've been saying that for years and it really bothers me to hear developers and users alike quip that because a package is open source it automatically means it's more secure than a comparable package that is closed-source.

As EricS. Raymond, one of the people behind open source, said in Linus's Law, "Given enough eyeballs, all bugs are shallow." If no one is looking, though -- as appears to be the case here — then simply because a codebase is open, it doesn't provide any safety or security at all.

Someone copied our GitHub project, added stars, and injected malicious code

https://old.reddit.com/r/golang/comments/1jbzuot/someone_copied_our_github_project_made_it_look/

#HackerNews #GitHub #Security #CodeInjection #MaliciousCode #OpenSource #Community

Someone copied our GitHub project, added stars, and injected malicious code

https://old.reddit.com/r/golang/comments/1jbzuot/someone_copied_our_github_project_made_it_look/

#HackerNews #GitHub #Security #CodeInjection #MaliciousCode #OpenSource #Community

🚨 Malicious commits target GitHub projects! A Texas researcher claims someone is impersonating him to sabotage his reputation. 🛑👨‍💻 #GitHub #CyberSecurity #MaliciousCode #TechNews #Hacking #DataBreach #OpenSource #IdentityTheft #CyberAttack #ResearchNews

🚨 Malicious commits target GitHub projects! A Texas researcher claims someone is impersonating him to sabotage his reputation. 🛑👨‍💻 #GitHub #CyberSecurity #MaliciousCode #TechNews #Hacking #DataBreach #OpenSource #IdentityTheft #CyberAttack #ResearchNews

APT Hackers Leverage macOS Flutter Apps To Embed Malicious Codes on Devices https://cybersecuritynews.com/apt-hackers-leverage-macos-flutter-apps/ #CyberSecurityNews #CyberSecurity #MaliciousCode #FlutterApps #Threats #macOS

APT Hackers Leverage macOS Flutter Apps To Embed Malicious Codes on Devices https://cybersecuritynews.com/apt-hackers-leverage-macos-flutter-apps/ #CyberSecurityNews #CyberSecurity #MaliciousCode #FlutterApps #Threats #macOS

#Development #Explainers
Trojaned clipboard · How attackers try to abuse your clipboard https://ilo.im/15z3gs

_____
#Security #Malware #MaliciousCode #Code #Clipboard #Browser #Website #WebDev #Frontend #Backend

#Development #Explainers
Trojaned clipboard · How attackers try to abuse your clipboard https://ilo.im/15z3gs

_____
#Security #Malware #MaliciousCode #Code #Clipboard #Browser #Website #WebDev #Frontend #Backend

Hunting for malicious code: The dangers of WASP stealing

https://medium.com/checkmarx-security/hunting-for-malicious-code-the-dangers-of-wasp-stealer-e0d073913623

#malware #maliciouscode #threatintel #threathunting

Hunting for malicious code: The dangers of WASP stealing

https://medium.com/checkmarx-security/hunting-for-malicious-code-the-dangers-of-wasp-stealer-e0d073913623

#malware #maliciouscode #threatintel #threathunting