Tagged: malicious package

September 27, 2025

First-Ever MCP Supply Chain Attack: Malicious Package Steals Emails by Adding Hidden BCC

Developers have long placed their trust in tools that allow AI assistants to handle routine tasks—ranging from sending emails to managing databases. Yet that trust has proven a vulnerability: beginning with version 1.0.16, the...

Malware

April 24, 2024

PyPI Package Exposed: Fortinet Warns of Discord Data Theft

Cybersecurity experts from Fortinet have identified a new malicious package in the PyPI registry for developers, aimed at stealing user data from Discord. The package, named “discordpy_bypass-1.7,” was published on March 10, 2024, and...