FlagThis

References :

• The Hacker News: The Hacker News reports on researchers uncovering PyPI packages stealing keystrokes and hijacking social accounts.
• Techzine Global: Two malicious Python packages revealed by FortiGuard Labs
• ciso2ciso.com: Python Malware in Zebo-0.1.0 and Cometlogger-0.1 Found Stealing User Data – Source:hackread.com
• ciso2ciso.com: Python Malware in Zebo-0.1.0 and Cometlogger-0.1 Found Stealing User Data – Source:hackread.com
• osint10x.com: Researchers Uncover PyPI Packages Stealing Keystrokes and Hijacking Social Accounts
• securityonline.info: PyPI Poisoned: “Zebo” and “Cometlogger” Downloaded Hundreds of Times

Classification:

• HashTags: #PyPI #Malware #SupplyChain
• Company: PyPI
• Target: Python developers
• Product: PyPI
• Feature: malicious package
• Malware: zebo/cometlogger
• Type: Malware
• Severity: Medium