Threatline

Results for “"developer's"”

21–30 of 37 articles

Best match · title matches first

Bleeping Computer

4 years ago

Popular Python and PHP libraries hijacked to steal AWS keys

PyPI module 'ctx' that gets downloaded over 20,000 times a week has been compromised in a software supply chain attack with malicious versions stealing the developer's environment variables. Additionally, versions of a 'phpass' fork published to the PHP/Composer package repository Packagist had been altered to steal secrets. [...]

php versions popular

Threatline

Results for “"developer's"”

Popular Python and PHP libraries hijacked to steal AWS keys

Popular PyPI and PHP libraries hijacked to steal AWS keys

Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware

OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL

OVHcloud GitHub Compromise Tied to GlassWorm Threat Actors

Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code

Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports

AWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run Code

Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands

282 iOS AI Apps Leak API Keys and Open AI Proxy Access in Network Traffic Study