Account Takeover and Malicious Replacement of ctx Project — Python Security 0.0 documentation

Account Takeover and Malicious Replacement of ctx Project — Python Security 0.0 documentation

Summary¶ The ctx hosted project on PyPI was taken over via user account compromise and replaced w...概要を表示 Summary¶ The ctx hosted project on PyPI was taken over via user account compromise and replaced with a malicious project which contained runtime code which collected the content of os.environ.items() when instantiating Ctx objects. The captured environment variables were sent as a base64 encoded query parameter to a heroku application running at https://anti-theft-web.herokuapp.com. Between 2022-0

• security
• Python
• プログラミング
• あとで読む