Post by Hector Borges

The Exploited Hunter: Weaponizing Urgency and Package Dependency Confusion Against the Vulnerability Research Community Security researchers and vulnerability analysts have become targets of a sophisticated campaign distributing trojanized proof-of-concept exploit repositories on GitHub. Key Finding: The ChocoPoC campaign weaponizes the professional urgency of security researchers by embedding malicious PyPI packages inside trojanized GitHub PoC repositories, bypassing endpoint detection through Python/C API native loading. A single infected researcher workstation becomes an enterprise-wide breach vector, exposing client networks, SSH profiles, API credentials, and active remote access session. #SupplyChainAttack #ThreatActorTTPs #MalwareAnalysis #ChocoPoC #GitHub #PyPI #Python