The AntV Supply Chain Campaign Expands: Microsoft's `durabletask` PyPI Package Compromised

2026-05-20来源 Snyk BlogEnglish
The AntV Supply Chain Campaign Expands: Microsoft's `durabletask` PyPI Package Compromised
A day after the AntV npm supply chain attack, the same campaign appears to have struck `durabletask`, a Microsoft-associated Python package on PyPI. Snyk has coverage in the vulnerability database and package health pages. Here's what we know.

原文：https://www.a8q9.cn/en/article/the-antv-supply-chain-campaign-expands-microsoft-s-durabletask-pypi-package-comp-0f4a3f.html

相关文章