TechJuice

GlassWorm Malware Silently Infects Hundreds of Python Projects

GlassWorm attack uses stolen GitHub tokens to inject malware into Python repositories, exposing developers to supply chain risks.
The Hacker News

GlassWorm Attack Uses Stolen GitHub Tokens to Force-Push Malware Into Python Repos

GlassWorm campaign injects malware into GitHub Python repos using stolen tokens since March 8, 2026, exposing developers to ...
SecurityWeek

ForceMemo: Python Repositories Compromised in GlassWorm Aftermath

Hackers use credentials stolen in the GlassWorm campaign to access GitHub accounts and inject malware into Python repositories.
腾讯网

GlassWorm攻击利用窃取的GitHub令牌向Python仓库强制推送恶意软件

GlassWorm恶意软件活动正被用于推动一场持续攻击，该攻击利用窃取的GitHub令牌向数百个Python仓库注入恶意软件。 StepSecurity表示："该攻击针对Python项目——包括Django应用程序、机器学习研究代码、Streamlit仪表板和PyPI包——通过在setup.py、main.py和app.py等文件中附加混淆代码。任何从受感染仓库运行pip install或克隆并执 ...
GitHub

KennethNero/minescript_unicode-fix

Minescript is a platform for controlling and interacting with Minecraft using scripts written in Python and other scripting languages. It is implemented as mod for Fabric, Forge, and NeoForge. The ...
InfoWorld

Open VSX extensions hijacked: GlassWorm malware spreads via dependency abuse

Threat actors are publishing clean extensions that later update to depend on hidden payload packages, bypassing marketplace ...
GitHub

Python interface for unitree sdk2

Execute the following commands in the terminal: Enter the unitree_sdk2_python directory, set CYCLONEDDS_HOME to the path of the cyclonedds you just compiled, and then install unitree_sdk2_python. The ...
Security Boulevard

Invisible Threats: Source Code Exfiltration in Google Antigravity

Source Code Exfiltration in Google Antigravity‍TL;DR: We explored a known issue in Google Antigravity where attackers can ...

基于SMPP协议伪造的政务短信钓鱼攻击特征分析与防御机制研究

在数字化转型的深水区，电子政务系统已成为连接政府与公民的核心纽带。短消息服务（SMS）因其高到达率与即时性，被广泛用于交通违章通知、税务提醒及身份验证等场景。然而，这一信任通道正逐渐演变为网络犯罪分子的首选攻击向量。2026年3月11日，夏威夷新闻现 ...

俄亥俄州短信钓鱼攻击演进与多模态防御架构研究

在数字化转型的浪潮中，移动通信网络已深深嵌入社会运行的毛细血管，成为信息传递、政务通知及商业交互的核心渠道。然而，这一便利性同时也为网络犯罪分子提供了广阔的攻击面。短消息服务（SMS），因其高打开率、即时性及无需复杂交互的特性，正逐渐取代电子邮件，成为社会工程学攻击的首选载体。这种现象被称为“短信钓鱼”（Smishing），其本质是利用SMS协议缺乏原生认证机制的缺陷，结合人类心理弱点，诱导受害者 ...