ChocoPoC: The Exploit You Cloned Is the Attack
ChocoPoC hides a remote access trojan inside trojanized CVE proof-of-concept repositories on GitHub, using a malicious PyPI dependency chain to compromise the researchers who clone them.
Python Security
2 articles
The Notebook That Stole Your Credentials: Google Colab's Hidden Security Risks
Millions run shared Colab notebooks without reading them. Here's what that actually costs you — from Google Drive exfiltration to OAuth token theft and supply chain attacks.