Malicious Release of elementary-data PyPI Package Steals Cloud Credentials from Data Engineers

2026-04-28来源 Snyk BlogEnglish
Malicious Release of elementary-data PyPI Package Steals Cloud Credentials from Data Engineers
Attackers exploited a GitHub Actions script injection vulnerability to publish a malicious version of the elementary-data Python CLI (v0.23.3), embedding a credential-stealing backdoor that targeted dbt profiles, cloud provider keys, and SSH secrets from data engineering environments.

原文：https://www.a8q9.cn/en/article/malicious-release-of-elementary-data-pypi-package-steals-cloud-credentials-from--caa345.html

相关文章