Several Python Libraries Discovered Stealing AWS Secrets And Keys | Cybernews Channel AWS News

Researchers have found many malicious Python programs that are designed to steal environment variables and AWS credentials and send them to a publicly accessible URL in the official third-party software repository.
According to Sonatype security researcher Ax Sharma, the list of packages includes loglib-modules, pygrata, pyg-modules, hkg-sol-utils, and pygrata-utils.
The URL has now been removed, along with the packages. "Some of these packages either contain code that reads and exfiltrates your secrets or use one of the dependencies that will do the job," Sharma said.
Unpleasantly, there are hundreds of endpoints holding this data. Since TXT files were not protected by any authentication measures, anybody with access to the internet could essentially obtain these credentials.
#Python #AWS #Cybersecurity #Cybernews