Malicious Code Infiltrates Python Package Index

A recent supply-chain attack on a popular Python package has raised a critical question: how much trust do you really have in the software that quietly powers your work? A malicious .pth file hidden in the litellm package version 1.82.8 can automatically execute malicious code on every Python startup.

https://osintsights.com/malicious-code-infiltrates-python-package-index?utm_source=mastodon&utm_medium=social

#SupplyChain #PythonPackageIndex #MaliciousCode #EmergingThreats #SoftwareCompromise