story

TeamPCP strikes again: Xinference (v2.6.0-2.6.2) PyPI package compromised (opens in new tab)

research.jfrog.com

1 pointslukecarr19d ago1 comments

1 comments

I editorialized the title to include the version range of compromised packages for visibility.

Also, worth mentioning that TeamPCP denies involvement, and instead points to a copycat using their name: https://xcancel.com/tradelots/status/2046928328066543832

j / k navigate · click thread line to collapse

lukecarrOP19d ago

I editorialized the title to include the version range of compromised packages for visibility.

Also, worth mentioning that TeamPCP denies involvement, and instead points to a copycat using their name: https://xcancel.com/tradelots/status/2046928328066543832

j / k navigate · click thread line to collapse