From Cybersecurity Help – Malicious campaign targeting PyPI users aims to steal cloud access tokens

Vulnerabilities

From Cybersecurity Help – Malicious campaign targeting PyPI users aims to steal cloud access tokens

shaikh Saqib March 17, 2025

Malicious packages targeted cloud client functionalities for major services, including Alibaba Cloud, AWS, and Tencent Cloud.

accesskey_tools compromised Alibaba Cloud secret exfiltration AWS credential theft breaches cloud access token theft cloud security vulnerability cyber awareness cyber defense cyber protection cyberattacks cybersecurity cybersecurity research on PyPI threats.data leaks dependency poisoning attack developer-targeted attack digital privacy fraudulent PyPI libraries hacks infosec malicious Python packages network security note online security PyPI malware campaign PyPI repository security PyPI supply chain attack Python malware detection Python package security breach securing Python dependencies security incidents security perspective software supply chain threats Tencent Cloud security risk threat threat actors in software supply chain threat intelligence threat note threatnote

Last updated on March 19, 2025