A malicious PyPI package was used to install a Monero cryptominer on Linux systems. The package in question, secretslib, was pushed to the official third-party software repo for Python on 6th August 2022. The package was described as “secrets matching and verification made easy”. Sonatype’s automated malware detection system flagged secretslib as potentially malicious. Further… Read more »

The post PyPI package installs cryptominer on Linux systems appeared first on Developer Tech News.