writeups.xyz / Revival Hijack – PyPI hijack technique exploited in the wild, puts 22K packages at risk

Submitter : c2a

Date: 4 September 2024

Bounty : undisclosed

Vulnerabilities :

• CI/CD
• Supply Chain Attack

Programs :

• PyPI

Authors :

• Andrey Polkovnichenko
• Brian Moussalli

Link :
https://jfrog.com/blog/revival-hijack-pypi-hijack-technique-exploited-22k-packages-at-risk/