PyPI package ‘ctx’ and PHP library ‘phpass’ compromised to steal environment variables

This week, immensely popular PyPI package 'ctx' has been compromised and altered to steal environment variables from its users. Additionally, a forked PHP project 'phpass' also suffered a repo-hijacking attack with the project tained with identical malicious payload.

The post PyPI package ‘ctx’ and PHP library ‘phpass’ compromised to steal environment variables appeared first on Security Boulevard.

compromised devzone environment featured firewall library malware prevention network security package php pypi pypi vulnerability vulnerabilities