home.social

#opensourcecompromise — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #opensourcecompromise, aggregated by home.social.

  1. Analyst207 @[email protected] ·

    PyPI Package elementary-data Compromised to Steal Developer Data

    A malicious release of the popular elementary-data package on PyPI, which has over 1.1 million monthly downloads, allowed an attacker to steal developer data through a sneaky backdoor. This widely-used open-source tool for data observability in dbt pipelines became a prime target for the secrets-stealing campaign.

    osintsights.com/pypi-package-e

    #OpensourceCompromise #SupplyChain #PackageManager #Pypi #DataObservability

    #opensourcecompromise #supplychain #packagemanager #pypi #dataobservability