BTC $70823.7516
ETH $3531.0259
BNB $621.2790
SOL $172.6448
stETH $3527.9907
XRP $0.6083
DOGE $0.1997
TON $7.2456
ADA $0.5853
AVAX $46.2175
wstETH $4100.4456
DOT $8.4402
BCH $607.1354
WETH $3536.6758
WBTC $70909.4458
TRX $0.1219
LINK $17.6560
MATIC $0.8809
UNI $9.0821
ICP $15.6959
LTC $97.8636
CAKE $3.7041
DAI $0.9996
IMX $2.5675
ETC $33.6641
RNDR $9.1096
FIL $8.1342
STX $2.9994
MNT $1.2895
NEAR $6.8343
TAO $615.5692
VET $0.0503
ATOM $10.8915
HBAR $0.0996
OKB $56.9032
FDUSD $1.0028
WIF $3.3890
KAS $0.1440
MKR $3344.9389
PEPE $0.0000
GRT $0.3114
THETA $2.8807
INJ $31.7467
FET $2.5067
XLM $0.1297
XMR $134.0517
USDE $1.0001
BTC $70823.7516
ETH $3531.0259
BNB $621.2790
SOL $172.6448
stETH $3527.9907
XRP $0.6083
DOGE $0.1997
TON $7.2456
ADA $0.5853
AVAX $46.2175
wstETH $4100.4456
DOT $8.4402
BCH $607.1354
WETH $3536.6758
WBTC $70909.4458
TRX $0.1219
LINK $17.6560
MATIC $0.8809
UNI $9.0821
ICP $15.6959
LTC $97.8636
CAKE $3.7041
DAI $0.9996
IMX $2.5675
ETC $33.6641
RNDR $9.1096
FIL $8.1342
STX $2.9994
MNT $1.2895
NEAR $6.8343
TAO $615.5692
VET $0.0503
ATOM $10.8915
HBAR $0.0996
OKB $56.9032
FDUSD $1.0028
WIF $3.3890
KAS $0.1440
MKR $3344.9389
PEPE $0.0000
GRT $0.3114
THETA $2.8807
INJ $31.7467
FET $2.5067
XLM $0.1297
XMR $134.0517
USDE $1.0001
  • Catalog
  • Blog
  • Tor Relay
  • Jabber
  • One-Time notes
  • Temp Email
  • What is TOR?
  • We are in tor
  • Hackers use the PyPI catalog to launch supply chain attacks


    A malicious PyPI package uses steganography to hide malicious code in images, according to a new report from security firm Check Point Research.

    A package called "apicolor" was uploaded to a third-party Python repository on October 31, 2022 and is described as "the core library for the REST API". The PyPI package "apicolor" is currently not available.

    The package code starts by manually setting additional requirements, then it downloads an image from the Imgur image sharing service and uses the installed package to process the image and generate output.

    Two packages are manually installed: request (a popular helper package for using the API) and judyb. The judyb code is a steganography module responsible for hiding and revealing hidden messages inside pictures. Check Point Research suspects that the image downloaded during the "apicolor" installation may contain hidden malicious code within it.

    In this attack, the "judyb" package is used to extract obfuscated Python code embedded in the downloaded image, which, after decoding, extracts and executes a malicious binary from a remote server.

    The development is part of an ongoing series of attacks in which attackers use open source tools to exploit user trust to launch attacks on the supply chain. More worryingly, such malicious libraries can be included in other open source projects and published on GitHub, expanding the scope of attacks.

    Author DeepWeb
    Thousands of users around the world have become victims of a new version of IceXLoader malware
    Leader of cybercriminal group Zeus arrested in Switzerland

    Comments 0

    Add comment