Supply Chain Attack Using PyPI Packages “Colorslib”, “Httpslib”, and “Libhttps”

• frek

  1 0 10.0 Python

We’ve (https://www.phylum.io) been tracking this actor as well. There are more packages than this blog post notes, including: fredli, derkpy, and fredmi. The first packages from this actor appeared on Jan 1.

A bit of work has been done to RE the binary itself, and we’ve found references to the following GitHub https://github.com/T4hg/frek/blob/master/__init__.py

Happy to chat with anyone that’s interested in this sort of thing. We’ve got a trove of samples that seems to grow daily!

• birdcage

  13 172 7.3 Rust

  Cross-platform embeddable sandboxing

  

Been working on this exact thing for nearly two years at https://www.phylum.io. We identified and reported about 1.2k packages in ecosystems like npm, pypi and others last year. GitHub app that checks your PRs for malware. We also built a free open source sandbox for package installations [1] so if malware does get executed it’s done in a locked down environment. Happy to chat further about this sort of thing, it’s something I’m wildly interested in!

[1] https://github.com/phylum-dev/birdcage

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

Suggest a related project