illustria.io

Stay tuned...

[illustria.io @illustriaio]

How 140k NuGet, NPM, and PyPi Packages Were Used to Spread Phishing Links??

An exciting joint research with our friends from @Checkmarx

https://t.co/hnHpbyHBsK

[Checkmarx Zero @CheckmarxZero]

Joint research with @illustriaio reveals a phishing campaign involving over 140k packages on NuGet, NPM, and PyPi registries.

Attackers spam these ecosystems with packages containing links to retail websites with referral IDs to earn referral rewards

https://t.co/QlTJPOO0FG

[illustria.io @illustriaio]

Check out our latest blog post https://t.co/kUTDjINGdS

[illustria.io @illustriaio]

Our CEO @IdanWiener with his view about the next software supply chain attack.

https://t.co/GvN2fqHVoD

[illustria.io @illustriaio]

PyTorch discloses malicious dependency chain compromise over holidays

"Since the PyPI index takes precedence, this malicious package was being installed instead of the version from our official repository״

[PyTorch @PyTorch]

If you installed PyTorch-nightly on Linux between Dec. 25 and Dec. 30, uninstall it and torchtriton immediately and use the latest nightly binaries.

Read the security advisory here: https://t.co/jnCSGXJRY0

[illustria.io @illustriaio]

#illustria #newwebsite

[illustria.io @illustriaio]

#trust was the foundation of #OpenSource, but it was never a safe place.
Our #biggest #Challenge is that we cannot rely on people - @illustriaio is here to #mitigate #risk. @KimZetter @maddiestone @florianroth @vxunderground https://t.co/hbE0lDWRyB