Alerts This Week
Warning Icon 1 615
Alerts This Week
Warning Icon 1 615

Malicious PyPI Package Installs Monero Cryptominer on Linux Systems

Calendar Aug 15, 2022 • User Avatar Anthony Pell
1 min read
32.Lock Code Circular Esm H446
Topics%20covered

Topics Covered

linux security software attack malicious package cryptominer package analysis monero threat pypi malware

A malicious PyPI package was used to install a Monero cryptominer on Linux systems.

 

The package in question, secretslib, was pushed to the official third-party software repo for Python on 6th August 2022. The package was described as “secrets matching and verification made easy”.

Sonatype’s automated malware detection system flagged secretslib as potentially malicious. Further analysis proved its suspicions to be correct.

The link for this article located at Developer is no longer available.

Your message here