#software-supply-chain-security

[ follow ]
#open-source #cyber-resilience-act #maven-central #cybersecurity #malware #python #remote-access-trojan
Software development
fromInfoQ
4 days ago

The Hidden Vulnerability of The Open Source Software Supply Chain: The Underlying Infrastructure

Brian Fox, Sonatype CTO and open source leader, guided Maven governance, OpenSSF/FINOS efforts, and advised governments on cyber resiliency including the EU Cyber Resilience Act.
Python
fromThe Hacker News
4 months ago

Researchers Uncover Malware in Fake Discord PyPI Package Downloaded 11,500+ Times

A malicious PyPI package named discordpydebug disguises itself as a Discord utility while incorporating a remote access trojan.
[ Load more ]