Detecting Malicious Python Packages

Filium was able to identify and counter about 5,700 downloads of malicious Python packages. The attacker used a couple of pretty interesting tricks that the attackers used in order to make their malicious packages a little bit more difficult to detect. They took an existing package like requests dash hdpx and added additional code specifically targeting developers.