Source |
The Register |
Identifiant |
8297813 |
Date de publication |
2023-01-04 14:00:13 (vue: 2023-01-04 14:05:34) |
Titre |
PyTorch dependency poisoned with malicious code |
Texte |
System data was exfiltrated during attack, but an anonymous person says it was a research project gone wrong An unknown attacker used the PyPI code repository to get developers to download a compromised PyTorch dependency that included malicious code designed to steal system data.… |
Notes |
★★
|
Envoyé |
Oui |
Condensat |
anonymous attack attacker but code compromised data dependency designed developers download during exfiltrated get gone included malicious person poisoned project pypi pytorch repository research says steal system unknown used wrong |
Tags |
|
Stories |
|
Move |
|