PyPI Attack ChatGPT Claude Impersonators Deliver JarkaStealer via Python Libraries
Two malicious programs that were posted to the Python Package Index (PyPI) repository were found by cybersecurity experts to deploy an information stealer known as JarkaStealer. The packages mimicked well-known artificial intelligence (AI) models such as OpenAI ChatGPT and Anthropic Claude.
A person called "Xeroline" published the programs, which were named gptplus and claudeai-eng, in November 2023. They received 1,748 and 1,826 downloads, respectively. PyPI no longer offers the ability to download either library.
One author uploaded the malicious packages to the repository, and according to a report by Kaspersky, the only differences between them were in their names and descriptions read more about PyPI Attack ChatGPT Claude Impersonators Deliver JarkaStealer via Python Libraries....