In yet another sign that developers continue to be targets of software supply chain attacks, a number of malicious packages have been discovered on the Rust programming language’s crate registry.
The libraries, uploaded between August 14 and 16, 2023, were published by a user named “amaperf,” Phylum said in a report published last week. The names of the packages, now taken down, are as follows:
Related Post
- November 22, 2024
Russian Hackers Deploy HATVIBE and CHERRYSPY Malware Across
Threat actors with ties to Russia have been linked to a cyber espionage campaign aimed at organizations in Central Asia,
- November 22, 2024
Unlocking Google Workspace Security: Are You Doing Enough
Google Workspace has quickly become the productivity backbone for businesses worldwide, offering an all-in-one suite with email, cloud storage and
- November 22, 2024
Microsoft, Meta, and DOJ Disrupt Global Cybercrime and
Meta Platforms, Microsoft, and the U.S. Department of Justice (DoJ) have announced independent actions to tackle cybercrime and disrupt services
- November 22, 2024
PyPI Attack: ChatGPT, Claude Impersonators Deliver JarkaStealer via
Cybersecurity researchers have discovered two malicious packages uploaded to the Python Package Index (PyPI) repository that impersonated popular artificial intelligence