Malicious PyPI Package Masquerades as Chimera Module to Steal AWS, CI/CD, and macOS Data

Malicious PyPI Package Masquerades as Chimera Module to Steal AWS, CI/CD, and macOS Data

/in

Cybersecurity researchers have discovered a malicious package on the Python Package Index (PyPI) repository that’s capable of harvesting sensitive developer-related information, such as credentials, configuration data, and environment variables, among others.
The package, named chimera-sandbox-extensions, attracted 143 downloads and likely targets users of a service called Chimera Sandbox,

The Hacker News – ​Read More

Hackers Leak Data of 10,000 VirtualMacOSX Customers in Alleged BreachHigh-Severity Vulnerabilities Patched in Tenable Nessus Agent