Tag: Repository hijacking

Malicious packages deepseeek and deepseekai published in Python Package Index

Posted on

As part of their research and monitoring efforts, the Supply Chain Security team of the Threat Intelligence department of the Positive Technologies Expert Security Center (PT ESC) detected and prevented a malicious campaign in the Python Package Index (PyPI) package Read More …

Hijackable Go Module Repositories

Posted on

The Go module ecosystem is unique because it’s decentralized. Other packaging systems like Pypi or NPM require developers to create accounts to upload their packages. This gives the package platform the ability to moderate users and content. That isn’t the Read More …