Source: thehackernews.com – Author: .
Cybersecurity researchers have discovered a malicious package on the Python Package Index (PyPI) repository that’s capable of harvesting sensitive developer-related information, such as credentials, configuration data, and environment variables, among others.
The package, named chimera-sandbox-extensions, attracted 143 downloads and likely targeted users of a service called Chimera Sandbox,
Original Post url: https://thehackernews.com/2025/06/malicious-pypi-package-masquerades-as.html
Category & Tags: –
Views: 2
