Active Malware Campaign Targeting Popular Python Packages Underway

1. birdcage

   1 13 186 4.3 Rust

   Cross-platform embeddable sandboxing

   

   In addition to this, taking precautions to not install unknown packages is probably also extremely prudent. Towards that end, we've open sourced a cross platform embeddable sandbox for package installations. Source is freely available on Github (https://github.com/phylum-dev/birdcage) and we've added it into our tooling so you can run pip install ... and it'll limit access to disk, network, etc. during package installation.

2. InfluxDB

   www.influxdata.com featured

   InfluxDB – Built for High-Performance Time Series Workloads. InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.

   

3. pypi-scan

   2 1 27 10.0 Python

   Discontinued Scan pypi for typosquatting

   

4. cli

   3 12 102 9.0 Rust

   Command line interface for the Phylum API (by phylum-dev)

   

   Our CLI tool (also open source and free) will check for typosquats, dependency confusion, malicious code, vulnerabilities, etc. in your package dependencies. Works for pypi, npm, rubygems, maven, nuget and very recently golang and rust crates.

Suggest a related project