[B3ulah1]

Whoever keeps fetching code from GitHub, beware! I just found, within an import created two days ago, a thief of 1801 lines of code that steals everything from your computer, including your bitcoins. From what I saw, the import was present in 16 repositories.

The information was being sent to a Discord webhook, and the entire script within the import was encrypted using the Fernet module. So, I created a small script to decrypt it since the key was available within the import.

.

Name of the import with the malicious script.

import pythoncryptolibraryV2

oh man....damn, thanks for the warning
what kind of repositories did you see that code in?

[Johnny]

Damn, good to know!

[imisssu]

Thanks for your warning.

But unfortunately for modern development, it is difficult to review every referenced library and its dependencies. I think it is inevitable to get caught

[ghjuyetmolyuiw]

Whoever keeps fetching code from GitHub, beware! I just found, within an import created two days ago, a thief of 1801 lines of code that steals everything from your computer, including your bitcoins. From what I saw, the import was present in 16 repositories.

The information was being sent to a Discord webhook, and the entire script within the import was encrypted using the Fernet module. So, I created a small script to decrypt it since the key was available within the import.

.

Name of the import with the malicious script.

import pythoncryptolibraryV2

Nice share! I'll keep an eye on it

[luaplayer000]

Thanks for the warning mate!

Github needs to find a way to aware exploiters!