data breaches1 week ago
Typosquatted Packages in RubyGems & PyPI Harvest Crypto and Secrets
A coordinated supply‑chain campaign dating from March 2023 has unleashed 60 rogue Ruby gems—and unknown Python packages—disguised as benign tools, siphoning credentials and crypto data, triggering...