[Stanley]

Alert: Malicious PyPI Package soopsocks Infects 2,653 Systems Before Takedown

Cybersecurity researchers have flagged a malicious package on the Python Package Index (PyPI) repository that claims to offer the ability to create a SOCKS5 proxy service, while also providing a stealthy backdoor-like functionality to drop additional payloads on Windows systems.
The deceptive package, named soopsocks, attracted a total of 2,653 downloads before it was taken down. It was first

https://thehackernews.com/2025/10/alert-...socks.html

[RangoWorld]

I'm always wary of downloading new python packages and modules. Specially when it comes to my main machine.

[plops]

Github cutting down the token lifetime seems like a good move to at least mitigate.

But cmon, how many times does it need to be said, review the damn package before your grab it. If its brand new, it's probably just not worth the risk.
If its a typo in cli, just.double check that the name is that you are trying to download via cli.

[Vectura]

Wow, that’s wild, 2,600+ downloads before anyone caught it. It’s honestly getting scary how often malicious PyPI packages slip through. Developers really need to start sandboxing and verifying dependencies before running installs. One sneaky “pip install” and you’re done for.

[Hackers]

Sheesh, they hit over 2000 machines.

Package managers are a huge risk right now. There is so much malware in pip/others, npm, etc.