Sonatype exposes malicious PyPI package ‘pytoileur’

Sonatype has exposed 'pytoileur', a malicious PyPI package designed to download and install trojanised Windows binaries capable of surveillance, commandeering persistence, and stealing cryptocurrency. This discovery is part of a broader, months-long "Cool package" campaign aimed at infiltrating the coding community.

Yesterday, an automated malware detection system operated by Sonatype, known as the Sonatype Repository Firewall, flagged a newly published PyPI package called...

29 May 2024 | Hacking & Security

Stack Overflow: 74% of developers are open to new jobs

Research from Stack Overflow suggests that almost three-quarters (74%) of developers are open to new jobs.

The so-called “Great Resignation” is an ongoing post-covid economic trend where employees have voluntarily resigned over wage stagnation, poor treatment, inflexible remote working policies, lack of benefits, and general job dissatisfaction.

Developers haven’t been spared from mistreatment by employers, and it seems that many are keeping their minds open to new...

19 December 2022 | Research