+- Hack Forums (https://hackforums.net)
+-- Forum: General Topics (https://hackforums.net/forumdisplay.php?fid=7)
+--- Forum: World (https://hackforums.net/forumdisplay.php?fid=445)
+---- Forum: News and Happenings (https://hackforums.net/forumdisplay.php?fid=89)
+---- Thread: Alert: Malicious PyPI Package soopsocks Infects 2,653 Systems Before Takedown (/showthread.php?tid=6310926)
Alert: Malicious PyPI Package soopsocks Infects 2,653 Systems Before Takedown - Stanley - Oct 12, 2025
Alert: Malicious PyPI Package soopsocks Infects 2,653 Systems Before Takedown
Cybersecurity researchers have flagged a malicious package on the Python Package Index (PyPI) repository that claims to offer the ability to create a SOCKS5 proxy service, while also providing a stealthy backdoor-like functionality to drop additional payloads on Windows systems.
The deceptive package, named soopsocks, attracted a total of 2,653 downloads before it was taken down. It was first
https://thehackernews.com/2025/10/alert-malicious-pypi-package-soopsocks.html
RE: Alert: Malicious PyPI Package soopsocks Infects 2,653 Systems Before Takedown - RangoWorld - Oct 12, 2025
I'm always wary of downloading new python packages and modules. Specially when it comes to my main machine.
RE: Alert: Malicious PyPI Package soopsocks Infects 2,653 Systems Before Takedown - plops - Oct 12, 2025
Github cutting down the token lifetime seems like a good move to at least mitigate.
But cmon, how many times does it need to be said, review the damn package before your grab it. If its brand new, it's probably just not worth the risk.
If its a typo in cli, just.double check that the name is that you are trying to download via cli.
RE: Alert: Malicious PyPI Package soopsocks Infects 2,653 Systems Before Takedown - Vectura - Oct 12, 2025
Wow, that’s wild, 2,600+ downloads before anyone caught it. It’s honestly getting scary how often malicious PyPI packages slip through. Developers really need to start sandboxing and verifying dependencies before running installs. One sneaky “pip install” and you’re done for.
RE: Alert: Malicious PyPI Package soopsocks Infects 2,653 Systems Before Takedown - Hackers - Oct 14, 2025
Sheesh, they hit over 2000 machines.
Package managers are a huge risk right now. There is so much malware in pip/others, npm, etc.