PyPI hackers code sneaky new tactic. Researchers caught 'em red handed

Python Package Index (PyPI) attackers used compiled code to evade detection. It’s possibly the first attack to take advantage of .PYC file direct execution — but likely not the last.

The ReversingLabs’ reverse engineering team led by Karlo Zanki (pictured) spotted the tactic. In this week’s Secure Software Blogwatch, we round up reax right.

Your humble blogwatcher curated these bloggy bits for your entertainment. Not to mention: Bees Packed in a Suitcase.
 

AST/SCA FAIL — RL FTW …

attack attackers caught code detection engineering evade file hackers led package pypi python python package python package index researchers reverse reverse engineering reversinglabs secure software secure software blogwatch software tactic team