
DeceptiveDevelopment poisons repos after stealing developer credentials
ESET says the group planted code on npm, PyPI, Packagist, Go modules, and extension stores from April to September 2026.
1 stories, newest first · one card per story

ESET says the group planted code on npm, PyPI, Packagist, Go modules, and extension stores from April to September 2026.
Today 2.1K readers · 10K views · 8K reads · all time 157K views