Malicious Python Packages Exfiltrating User Data Detected

Malicious Python Packages Detection

Security researchers at Checkmarx have exposed an alarming operation that involves the use of malware hosted on the Python repository PyPI.

Exfiltration to Telegram Bot

The malware is designed to search for and extract files from the victim's device, transferring them to a remote Telegram bot.

This discovery raises concerns about the security implications of using Python packages from untrusted sources.