3 Malicious PyPI Packages Found Targeting Linux with Crypto Miners

Three new harmful packages: modularseven, driftme, and catme, found in the Python Package Index (PyPI) open-source repository, have infected Linux devices by deploying a cryptocurrency miner. Downloaded 431 times before removal, the packages use a CoinMiner executable, similar to a previous package called culturestreak, that utilises a shell script to stealthily carry out its malicious activities. The malware is designed to avoid detection and ensure long-term exploitation of user devices.