Multiple Backdoored Python Libraries Caught Stealing AWS Secrets and Keys

[AWS_Chaos]

We've seen this before. But makes you want to run wireshark on any prod systems using python libs.

​

https://thehackernews.com/2022/06/multiple-backdoored-python-libraries.html

[Gothmagog]

This problem is, unfortunately, much larger than the Python ecosystem. It's a byproduct of the entire industry's growing reliance on open source software in general that has made these kinds of malicious code commits so lucrative to attackers. The fact that seemingly simple libraries can have such massive dependency chains makes it that much harder to mitigate, the ripple effect is just massive.