PyPI: Python packets steal AWS keys from users

• packj

  38 614 7.2 Python

  Packj stops :zap: Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain

  

> a base 64 encrypted string that gets decrypted and then passed to a shell.

This is a very common malicious behavior. Packj detects obfuscation [1] as well as spawning of shell commands (exec system call) [2]. I've updated threats.csv to flag code obfuscation.

1. https://github.com/ossillate-inc/packj/blob/main/main.py#L48...

• firejail

  139 5,442 9.7 C

  Linux namespaces and seccomp-bpf sandbox

> I like Android's system of per-app uid/gid. But AFAIK it's not implemented by any mainstream Linux kernel or distro.

You can create users manually for each app.

For GUI apps, https://firejail.wordpress.com/

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• software-supply-chain-compromises

  2 106 4.6

  Discontinued A dataset of software supply chain compromises. Please help us maintain it!

  

Sure. Please email me (in profile) for the list. You can also look at the following resources for malware samples:

1. https://github.com/IQTLabs/software-supply-chain-compromises

• pypi_malware

  1 52 10.0 Python

  PyPI malware packages

• maloss

  3 106 0.0 Java

  Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages

• dockerify

  1 0 0.0 Shell

  Run any CLI command in a docker container

I hacked up a bash script for running arbitrary command in docker container, mounting only PWD. It traces dynamic libraries through ldd and creates a new image for each unique command. I got it working for ffmpeg:

https://github.com/paskozdilar/dockerify

I might try to optimize it a little bit later, perhaps bind-mount dynamic libraries instead of creating a new image for each command.

Suggest a related project