Malicious PyPI, npm, and Ruby Packages Exposed in Ongoing Open-Source Supply Chain Attacks
· Source: thehackernews.com
In short
Multiple malicious packages have been discovered across npm, Python, and Ruby repositories, targeting cryptocurrency wallets, erasing codebases, and exfiltrating Telegram API tokens. These attacks exploit geopolitical events and typosquatting tactics to infiltrate CI/CD environments. The findings highlight the growing threat of supply chain attacks in open-source ecosystems.
Read Original Article — Read the full article on the publisher’s site.
In the issue of week 23, 2025: Amazon and AI Drive Next-Gen Supply Chain Resilience and Sustainability
Tags: supply chain, cybersecurity, DevOps, malware, cryptocurrency, automation