P.01Cybersecurity/Supply Chain Security··5 min read
Fake Paysafe and Skrill SDKs Hit npm and PyPI
Seventeen packages published July 7 impersonated real payment SDKs, returned fake success responses, and quietly exfiltrated API keys and cloud credentials.
Supply Chain AttacknpmPyPI
Read