Malicious PyPI Packages Using Compiled Python Code to Bypass Detection

Researchers have discovered a novel attack on the Python Package Index (PyPI) repository that employs compiled Python code to sidestep detection by application security tools.
"It may be the first supply chain attack to take advantage of the fact that Python bytecode (PYC) files can be directly executed," ReversingLabs analyst Karlo Zanki said in a report shared with The Hacker News.
The package

analyst application application security application security tools attack bypass bytecode code detection fact files malicious may novel package packages pypi pypi packages python python package python package index repository researchers reversinglabs security security tools supply supply chain supply chain attack tools