TeamPCP strikes again, with almost identical code to LiteLLM.

针对流行扫描工具Trivy的供应链攻击背后的威胁行为者疑似正在进行后续攻击，导致大量npm包遭到一种名为CanisterWorm的自传播蠕虫感染。该恶意软件利用ICP容器作为命令控制服务器的死信箱解析器，这是首次公开记录的滥用ICP容器获取C2服务器的案例。受影响的包包括EmilGroup和opengov范围内的多个包。感染链通过postinstall钩子执行加载器，投放Python后门联系ICP ...

UTC, Aikido Security detected an unusual pattern across the npm registry: dozens of packages from multiple organizations were ...

The Trivy vulnerability scanner was compromised in a supply-chain attack by threat actors known as TeamPCP, which distributed ...

点击上方“Deephub Imba”,关注公众号,好文章不错过 !loguru、pydantic、httpx都是很好用的库，这篇文章整理的是另一类：多数开发者不知道它们存在，却在不少资深工程师的 requirements.txt ...

CanisterWorm infects 28 npm packages via ICP-based C2, enabling self-propagation and persistent backdoor access across ...

Qualys reports the discovery by their threat research unit of vulnerabilities in the Linux AppArmor system used by SUSE, Debian, Ubuntu, and ...

Ever thought what turns a good idea into a working application? The short and simple answer to this question is selecting the right framework. As Python has gained popularity among web development ...

GlassWorm恶意软件活动正被用于持续攻击，通过窃取的GitHub令牌向数百个Python仓库注入恶意代码。攻击目标包括Django应用、机器学习研究代码、Streamlit仪表板和PyPI包，通过在setup.py、main.py和app.py等文件中附加混淆代码实现。攻击者获取开发者账户访问权限后，将恶意代码变基到目标仓库的默认分支并强制推送更改，同时保持原始提交信息、作者和日期不变。这种 ...

Abstract: Malicious website protection through malware URL detection is very important for cybersecurity. This paper discusses the use of deep learning algorithms in detecting malware URLs by ...

Generate strongly-typed Python helpers (TypedDict param objects + overloads) from a React Router v6+ route tree. This is useful when a Python backend, worker, or test suite needs to construct URLs ...