May 26, 2022, 12:24 a.m. | brooke.crothers

Security Boulevard securityboulevard.com

Popular Python package compromised: Don’t ‘Blindly Trust Open Source’

brooke.crothers

Wed, 05/25/2022 - 17:24




Python package compromise

The Python package ctx, which averages over 20,000 downloads per week, was compromised on the Python Package Index (PyPI), according to both forum and social media posts and a bevy of news reports


“When we browse the release history tab, we can see various versions of ctx uploaded within the past few days,” the SANS Institute said on May 24 …

compromised don open source package popular python trust

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

Digital Trust Cyber Transformation Senior

@ KPMG India | Mumbai, Maharashtra, India

Security Consultant, Assessment Services - SOC 2 | Remote US

@ Coalfire | United States

Sr. Systems Security Engineer

@ Effectual | Washington, DC

Cyber Network Engineer

@ SonicWall | Woodbridge, Virginia, United States

Security Architect

@ Nokia | Belgium