Data is exfiltrated to Replit-hosted instances:
Kaspersky solutions detect the threat with the following verdicts:
We are constantly monitoring the updates to repositories to ensure that all new malicious packages are detected.
Timeline of uploaded packages
|Package name||Version||Timestamp (UTC)|
We covered the incident in more detail in a private report delivered to customers of our Threat Intelligence Portal.