SentinelOne SDK-impersonating PyPi package leveraged in supply chain attack

SentinelOne SDK-impersonating PyPi package leveraged in supply chain attack SecurityWeek reports that a malicious PyPi package masquerading as a SentinelOne software development kit is being used in a new supply chain attack aimed at distributing a backdoor code for data theft.

attack data security impersonating package pypi pypi package sdk sentinelone supply supply chain supply chain attack third party risk