lemmy.onlylans.io
  • Communities
  • Create Post
  • Create Community
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
Danterious@lemmy.dbzer0.com to Open Source@lemmy.ml · 1 year ago

Malicious Go Binary Delivered via Steganography in PyPI

blog.phylum.io

external-link
message-square
3
fedilink
  • cross-posted to:
  • [email protected]
63
external-link

Malicious Go Binary Delivered via Steganography in PyPI

blog.phylum.io

Danterious@lemmy.dbzer0.com to Open Source@lemmy.ml · 1 year ago
message-square
3
fedilink
  • cross-posted to:
  • [email protected]
On May 10, 2024, Phylum’s automated risk detection platform alerted us to a suspicious publication on PyPI. The package was called requests-darwin-lite and appeared to be a fork of the ever-popular requests package with a few key differences, most notably the inclusion of a malicious Go binary packed into
  • bizdelnick@lemmy.ml
    link
    fedilink
    arrow-up
    10
    ·
    1 year ago

    It is not steganography. It’s just cat original.png trojan > malicious.png.

    • Markaos@lemmy.one
      link
      fedilink
      arrow-up
      8
      ·
      1 year ago

      See? Hidden in an image, clearly that’s steganography! /s

Open Source@lemmy.ml

opensource@lemmy.ml

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: [email protected]

All about open source! Feel free to ask questions, and share news, and interesting stuff!

Useful Links

  • Open Source Initiative
  • Free Software Foundation
  • Electronic Frontier Foundation
  • Software Freedom Conservancy
  • It’s FOSS
  • Android FOSS Apps Megathread

Rules

  • Posts must be relevant to the open source ideology
  • No NSFW content
  • No hate speech, bigotry, etc

Related Communities

  • [email protected]
  • [email protected]
  • [email protected]
  • [email protected]
  • [email protected]

Community icon from opensource.org, but we are not affiliated with them.

Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 204 users / day
  • 1.16K users / week
  • 3.24K users / month
  • 10.6K users / 6 months
  • 2 local subscribers
  • 39K subscribers
  • 2.32K Posts
  • 37.1K Comments
  • Modlog
  • mods:
  • Evan@lemmy.ml
  • kevincox@lemmy.ml
  • CrypticCoffee@lemmy.ml
  • Lettuce eat lettuce@lemmy.ml
  • BE: 0.19.8
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org