Malicious ‘Pyronut’ Package Backdoors Telegram Bots With Remote Code Execution

A malicious Python package named pyronut has been discovered on the Python Package Index (PyPI), targeting developers who build Telegram bots by impersonating the popular pyrogram framework. Rather than relying on typosquatting — where a name resembles a legitimate one — the threat actor copied pyrogram’s entire project description word-for-word, creating what researchers describe as a malicious fork, a […]

The post Malicious ‘Pyronut’ Package Backdoors Telegram Bots With Remote Code Execution appeared first on Cyber Security News.