
Fake Python Spellchecker Packages on PyPI Contained Hidden Remote Access Trojan
cybersecuritymalwarePyPIPythonRATsupply_chain_attackspellcheckertrojanopen_sourcethreat_intelligence
Cybersecurity researchers have identified two malicious packages on the PyPI repository, named spellcheckerpy and spellchecker-py, masquerading as spellcheckers. These packages contained a concealed remote access Trojan (RAT). They were downloaded over 1,000 times in total before being removed. No specific discovery or publication date is mentioned. Technical details about the RAT or its operational methods are not provided in the excerpt.