PyPI Confirms No Malware Published Despite Massive GhostAction Token Theft Affecting 570+ Repositories
The Python Software Foundation successfully thwarted the GhostAction supply chain attack by invalidating all stolen PyPI tokens before attackers could distribute malicious software. Discovered in September by GitGuardian, the attack compromised over 3,300 secrets across multiple platforms ...