Tag: rope.pyz

1 Attack Reports | 0 Vulnerabilities

Attack reports

Latest PyPi Compromise

A supply chain attack targeting the Microsoft DurableTask Python client compromised versions 1.4.1, 1.4.2, and 1.4.3 on PyPi. The threat actor gained access through a compromised GitHub account previously linked to attacks, using stolen credentials to dump GitHub secrets containing PyPi tokens. The…
credential theft
supply chain attack
pypi compromise
2026-05-19
aws ssm propagation
durabletask
github secrets
kubernetes lateral movement
managed.pyz
password manager
rope.pyz
transformers.pyz
Published: May 19, 2026
Downloadable IOCs: 7
Click here to see more Attack Reports