CyberSecurity updates
Updated: 2024-09-12 17:55:14 Pacfic

Flag This

Revival Hijack: PyPI Package Names Used for Supply Chain Attacks - 8d

Threat actors are employing a new attack technique called ‘Revival Hijack’ to target the Python Package Index (PyPI). This technique involves registering new PyPI projects using the names of previously deleted packages. These malicious packages can then be incorporated into supply chain attacks, potentially compromising organizations that rely on them. Researchers have discovered that over 22,000 removed PyPI packages could be vulnerable to this tactic. The impact could be significant for organizations relying on vulnerable Python packages.

References

  • The Hacker News - The Hacker News published an article about the Revival Hijack supply chain attack.
  • BleepingComputer - Report on the 'Revival Hijack' technique and the threat it poses
  • @youranonriots - YourAnonRiots reported on the Revival Hijack supply chain attack on Kolektiva.Social.

Classification:

  • Type: Malware
  • Severity: Medium
  • Company: JFrog
  • Target: Organizations using Python
  • Product: PyPI
  • Feature: Package Management






This site is an experimental news aggregator using feeds I personally follow. You can reach me using contacts here if you have feedback. You can also find Flathis at Mastodon.