The “Revival Hijack” technique exploits a vulnerability in PyPI’s package removal process. When a popular package is deleted, its name becomes immediately available for registration by others.  Malicious actors can hijack the name of such a package and replace it with a malicious version, which can lead to security breaches when unsuspecting users update or … Continue reading Revival Hijacking: Exploiting PyPI Packages in the Wild