Developers beware: Imposter HTTP libraries lurk on PyPI

While monitoring different malicious packages found in public software repositories, ReversingLabs researchers have noticed an increase of malicious HTTP libraries on the Python Package Index (PyPI) repository. Actually, we should air-quote “HTTP libraries.” In reality, most of these are simple, malicious packages bearing names that are Frankenstein-like amalgamations of the acronym "HTTP".

The post Developers beware: Imposter HTTP libraries lurk on PyPI appeared first on Security Boulevard.