Skip to content
durabletask: TeamPCP's Latest PyPi Compromise
wiz.io | blog | #cloud | #supply-chain | #malware | #credential-theft | #pypi | #teampcp | #durabletask
Summary
TeamPCP hit durabletask 1.4.1-1.4.3, Microsoft's Durable Task client: a hijacked account dumped a GitHub-stored PyPI token to push malware that steals credentials, spreading via AWS SSM.
- Published
- Collected