[B! PyPI] moo_sanã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

moo_san id:moo_san

PyPIã«é–¢ã™ã‚‹moo_sanã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (4)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ä¸æ£ãªPythonãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã‚’PyPIã«44å€‹ç™ºè¦‹ã€åˆ©ç”¨ã®æœ‰ç„¡ã®ç¢ºèªã‚’
Check Point Software Techno logiesã¯6æœˆ16æ—¥(ç±³å›½æ™‚é–“)ã€ã€ŒPyPI Suspends New Registrations After Malicious Python Script Attackã€ã«ãŠã„ã¦ã€PyPI (Python Package Index)ãƒªãƒã‚¸ãƒˆãƒªã«æ‚ªæ„ã®ã‚ã‚‹ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ãŒè¤‡æ•°ã‚ã‚‹ã“ã¨ã‚’ä¼ãˆãŸã€‚ã€ŒDreamyOakXTimmywagã€ã¨å‘¼ã°ã‚Œã‚‹ä½œæˆè€…ã«ã‚ˆã‚Šã€44ã‚‚ã®ä¸æ£ãªãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ãŒãƒªãƒã‚¸ãƒˆãƒªã«è¿½åŠ ã•ã‚Œã¦ã„ãŸã“ã¨ãŒæ˜Žã‚‰ã‹ã«ãªã£ãŸã€‚ PyPI Suspends New Registrations After Malicious Python Script Attack ç‰¹å®šã•ã‚ŒãŸ44ã®ä¸æ£ãªPyPIãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã¯æ¬¡ã®ã¨ãŠã‚Šã€‚ sys-scikit-learn 17.8.18 sqlalchemy-requests 7.1.1 sqlalc
moo_san 2023/06/20
Security Threat

Malware

Python

PyPI
ãƒªãƒ³ã‚¯
PyPIã«HTTPãƒ©ã‚¤ãƒ–ãƒ©ãƒªè£…ã£ãŸå½ã®Pythonãƒ‘ãƒƒã‚±ãƒ¼ã‚¸41å€‹ç™ºè¦‹
ReversingLabsã¯2æœˆ22æ—¥(ç±³å›½æ™‚é–“)ã€ã€ŒDevelopers beware: Imposter HTTP libraries lurk on PyPIã€ã«ãŠã„ã¦ã€PyPIãƒªãƒã‚¸ãƒˆãƒªã«HTTPãƒ©ã‚¤ãƒ–ãƒ©ãƒªã‚’è£…ã£ãŸæ‚ªæ„ã‚ã‚‹41å€‹ã®Pythonãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã‚’ç¢ºèªã—ãŸã¨ä¼ãˆãŸã€‚ã“ã‚Œã¯ã‚µã‚¤ãƒãƒ¼æ”»æ’ƒè€…ãŒPyPIã€npmã€GitHubãªã©ã®ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ãƒªãƒã‚¸ãƒˆãƒªã‚’æ‚ªç”¨ã—ã¦ãƒžãƒ«ã‚¦ã‚§ã‚¢ã‚’é…å¸ƒã—ã‚ˆã†ã¨ã™ã‚‹æœ€æ–°ã®è©¦ã¿ã¨èª¬æ˜Žã•ã‚Œã¦ã„ã‚‹ã€‚ Developers beware: Imposter HTTP libraries lurk on PyPI ç™ºè¦‹ã•ã‚ŒãŸæ‚ªæ„ã‚ã‚‹ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã¯ã€ä¸»ã«æ¬¡ã®2ã¤ã®ã‚¿ã‚¤ãƒ—ã®æ‚ªæ„ã‚ã‚‹ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã«ãªã£ã¦ã„ã‚‹ã¨æŒ‡æ‘˜ã•ã‚Œã¦ã„ã‚‹ã€‚ ä¾µå®³ã—ãŸã‚·ã‚¹ãƒ†ãƒ ã«ç¬¬2æ®µéšŽã®ãƒžãƒ«ã‚¦ã‚§ã‚¢ã‚’é…ä¿¡ã™ã‚‹ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ€ã¨ã—ã¦æ©Ÿèƒ½ã™ã‚‹ ãƒ‡ãƒ¼ã‚¿çªƒå–ã‚’è¡Œã†ãŸã‚ã®æƒ…å ±ã‚¹ãƒ†ã‚£ãƒ¼ãƒ©ã¨ã—ã¦æ©Ÿèƒ½ã™ã‚‹ ReversingLabs
moo_san 2023/02/25
Security Threat

Malware

Python

PyPI
ãƒªãƒ³ã‚¯
æ‚ªç”¨ã•ã‚Œã‚‹PyPI ï½œãƒ–ãƒã‚°(ã»ã¼ã“ã‚‚ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ‹ãƒ¥ãƒ¼ã‚¹)ï½œ(æ ª)ã‚³ãƒ³ã‚¹ãƒ†ãƒ© ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ ã‚¸ãƒ£ãƒ‘ãƒ³
PyPIã¯Python Package Indexã§Pythonç”¨ã®ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£ãƒ¼ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ãƒªãƒã‚¸ãƒˆãƒªã§ã™ã€‚ Pythonã®ã‚³ãƒ¼ãƒ‰ã‚’èª°ã§ã‚‚ç™»éŒ²ã§ãã¾ã™ã—ã€èª°ã§ã‚‚ä½¿ç”¨ã§ãã¾ã™ã€‚ ä½¿ç”¨ã‚‚ç°¡å˜ã§ç®¡ç†ã‚³ãƒžãƒ³ãƒ‰ã«åˆ©ç”¨ã™ã‚‹ã‚³ãƒ¼ãƒ‰ã®åå‰ã‚’æŒ‡å®šã™ã‚‹ã ã‘ã§ç°¡å˜ã«è‡ªåˆ†ã®ç’°å¢ƒã«å–ã‚Šè¾¼ã‚€ã“ã¨ãŒã§ãã¾ã™ã€‚ ãã‚“ãªPyPIã¯ã€ã“ã‚Œã¾ã§ä½•åº¦ã‚‚æ‚ªç”¨ã•ã‚Œã¦ãã¦ã„ã¾ã™ã€‚ å…ˆæ—¥ã€ã¾ãŸæ‚ªæ€§ã®ã‚³ãƒ¼ãƒ‰ã®é…å¸ƒã«ä½¿ç”¨ã•ã‚Œã¦ã„ã¾ã—ãŸã€‚ æ‚ªæ€§ã®ã‚³ãƒ¼ãƒ‰ 3ã¤ã®æ‚ªæ„ã®ã‚ã‚‹ã‚³ãƒ¼ãƒ‰ãŒç¢ºèªã•ã‚Œã¾ã—ãŸã€‚ åå‰ã¯ãã‚Œãžã‚Œã€Œcolorslibã€ã€ã€Œhttpslibã€ã€ã€Œlibhttpsã€ã§ã™ã€‚ ã‚³ãƒ¼ãƒ‰ã®å…¬é–‹ã‚¹ã‚¿ã‚¤ãƒ« PyPIã®Webã‚µã‚¤ãƒˆã§ã¯ã€å…¬é–‹ã•ã‚Œã¦ã„ã‚‹ãã‚Œãžã‚Œã®ã‚³ãƒ¼ãƒ‰ã«ã¤ã„ã¦ã®èª¬æ˜Žã‚’è¦‹ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ ã“ã‚Œã‚‰ã®ã‚³ãƒ¼ãƒ‰ã®ãã‚Œãžã‚Œã¯æ£å½“ã«è¦‹ãˆã‚‹æ•´ã£ãŸReadmeã‚’å‚™ãˆã¦ã„ã¾ã—ãŸã€‚ æœ‰åãªãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã«ä¼¼ãŸåå‰ã‚’ä»˜ã‘ã¦Typoã‚’ç‹™ã†ã‚¿ã‚¤ãƒ—ã§ã¯ãªãã€è‡ªåˆ†
moo_san 2023/01/26
Security Threat

Malware

Attack Method

PyPI
ãƒªãƒ³ã‚¯
é–‹ç™ºè€…ã‚’ã‚¿ãƒ¼ã‚²ãƒƒãƒˆã«ã—ãŸãƒžãƒ«ã‚¦ã‚§ã‚¢ã€ŒW4SPã€ãŒPyPIã®æ‚ªæ„ã‚ã‚‹ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã«ä»•è¾¼ã¾ã‚Œã¦ã„ã‚‹ã“ã¨ãŒæ˜Žã‚‰ã‹ã«
ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°è¨€èªžã€ŒPythonã€ã®ãƒªãƒã‚¸ãƒˆãƒªã§ã‚ã‚‹ã€ŒPython Package Index(PyPI)ã€ã®20ä»¥ä¸Šã®ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã«ã€æƒ…å ±ã‚’ç›—ã‚€ãƒžãƒ«ã‚¦ã‚§ã‚¢ã€ŒW4SPã€ãŒå«ã¾ã‚Œã¦ã„ã‚‹ã“ã¨ãŒåˆ†ã‹ã‚Šã¾ã—ãŸã€‚ Phylum Discovers Dozens More PyPI Packages Attempting to Deliver W4SP Stealer in Ongoing Supply-Chain Attack https://blog.phylum.io/phylum-discovers-dozens-more-pypi-packages-attempting-to-deliver-w4sp-stealer-in-ongoing-supply-chain-attack ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¼æ¥ã®Phylumã«ã‚ˆã‚‹ã¨ã€æ–°ãŸã«å…¬é–‹ã•ã‚ŒãŸæ•°åã®PyPIãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã®ä¸ã«ã€Pythoné–‹ç™ºè€…ã®ãƒžã‚·ãƒ³ã«
moo_san 2022/11/05
Security Threat

Malware

Python

PyPI
ãƒªãƒ³ã‚¯
1