MemTensor Package Compromise Exposes Developers To Cross Platform Credential Stealer
Security researchers identify compromised MemTensor npm and PyPI packages delivering sckit malware designed to steal developer credentials and sensitive cloud data.
Security researchers identify compromised MemTensor npm and PyPI packages delivering sckit malware designed to steal developer credentials and sensitive cloud data.
CloudSEK has revealed that malicious LiteLLM releases linked to the Trivy supply chain attack may have exposed more than 2,100 organizations by stealing cloud credentials, API keys, and other sensitive secrets.