Socket: PyPI and npm payment SDK malware compromises CI/CD

· Developer Tech · July 8, 2026, 4:02 p.m.
APIs Build & Ship CI/CD & Release Engineering Cybersecurity & Development npm ci/cd pypi Developer Tools
Summary
Socket reports that 17 malicious payment SDK packages were found on npm and PyPI, designed to harvest developer credentials and CI/CD variables, posing a threat to engineering teams using PaySafe and Skrill.
Read full post on www.developer-tech.com →
AUTHOR
Advertise
Sponsor diff.blog
Put your product in front of developers who read and write about their craft. One exclusive sponsor at a time.
Become a sponsor →