In a new twist on software supply chain attacks, researchers have discovered a Python package hiding malware inside of compiled code, allowing it to evade ordinary detection measures. On April 17 ...

Newly discovered campaign takes advantage of the fact that most vulnerability scanning tools don't read compiled open-source software.

Using PYC files to hide malicious code Compared to the similar Node.js campaign reported by Securonix, in this case, attackers stored the malicious code in Python bytecode (PYC) files.

Computers don’t simply "understand" code in the way humans do. They rely on a highly sophisticated series of steps to ...