Sonatype, a software supply chain management company, has issued a warning about a malicious Python package called “aptX.” According to Sonatype’s recent blog post, the aptX package contained a hidden payload that could drop a Meterpreter shell and delete the evidence of its activity from the victim’s system by removing its entries from the netstat command output.
The aptX package was discovered on PyPI, a repository for Python packages. The post emphasizes the importance of using automated security tools and following best practices to prevent such attacks. Additionally, the post highlights the importance of community collaboration to identify and report malicious packages to maintain the security of PyPI.
Sonatype’s discovery of the aptX package serves as a reminder of the potential risks associated with using third-party packages and the importance of securing the software supply chain. It’s crucial to be vigilant and take appropriate measures to mitigate the risks of such attacks.