New Malicious PyPI Packages Caught Using Covert Side-Loading Tactics
New Malicious PyPI Packages Caught Using Covert Side-Loading Tactics
20 February 2024
Cybersecurity researchers have discovered two malicious packages on the Python Package Index (PyPI) repository that were found leveraging a technique called DLL side-loading to circumvent detection by security software and run malicious code.
The packages, named NP6HelperHttptest and NP6HelperHttper, were each downloaded 537 and 166 times, respectively,